v4.14.0

BREAKING CHANGES:

• nginx - update api version to 2024-09-01-preview, this API no longer supports certain properties which have had to be deprecated in the provider for the upgrade (#27776)
• Data Source: azurerm_nginx_configuration - the protected_file.content property will not be populated and has been deprecated (#27776)
• Data Source: azurerm_nginx_deployment - the managed_resource_group property will not be populated and has been deprecated (#27776)
• azurerm_network_function_collector_policy - the API doesn't preserve the ordering of the ipfx_ingestion.source_resource_ids property causing non-empty plans after apply, this property's type has been changed from a list to a set to prevent Terraform from continually trying to recreate this resource. If this property is being referenced anywhere you will need to update your config to convert it to a list before referencing it (#27915)
• azurerm_nginx_deployment - the managed_resource_group property is no longer supported and has been deprecated (#27776)

FEATURES:

• New Resource: azurerm_cognitive_account_rai_blocklist (#28043)
• New Resource: azurerm_fabric_capacity (#28080)

ENHANCEMENTS:

• dependencies - update go-azure-sdk to v0.20241206.1180327 (#28211)
• nginx - update api version to 2024-11-01-preview (#28227)
• azurerm_linux_function_app - add support for preview value 21 for java_version (#26304)
• azurerm_linux_function_app_slot - support 1.3 for site_config.minimum_tls_version and site_config.scm_minimum_tls_version (#28016)
• azurerm_linux_web_app - add support for preview value 21 for java_version (#26304)
• azurerm_orchestrated_virtual_machine_scale_set - support hot patching for 2025-datacenter-azure-edition-core-smalldisk (#28160)
• azurerm_search_service - add support for the network_rule_bypass_option property (#28139)
• azurerm_windows_function_app - add support for preview value 21 for java_version (#26304)
• azurerm_windows_function_app_slot - support 1.3 for site_config.minimum_tls_version and site_config.scm_minimum_tls_version (#28016)
• azurerm_windows_virtual_machine - support hot patching for 2025-datacenter-azure-edition-core-smalldisk (#28160)
• azurerm_windows_web_app - add support for preview value 21 for java_version (#26304)

BUG FIXES:

• azurerm_management_group - fix regression where subscription ID can't be parsed correctly anymore (#28228)

v4.13.0

ENHANCEMENTS:

• azurerm_cognitive_deployment - support for the dynamic_throttling_enabled property (#28100)
• azurerm_key_vault_managed_hardware_security_module_key - the key_type property now supports oct-HSM (#28171)
• azurerm_machine_learning_datastore_datalake_gen2 - can now be used with storage account in a different subscription (#28123)
• azurerm_network_watcher_flow_log - target_resource_id supports subnets and network interfaces (#28177)

BUG:

• Data Source: azurerm_logic_app_standard - update the identity property to support User Assigned Identities (#28158)
• azurerm_cdn_frontdoor_origin_group - update validation of the interval_in_seconds property to match API behaviour (#28143)
• azurerm_container_group - retrieve log analytics workspace key from config when updating resource (#28025)
• azurerm_mssql_elasticpool - fix sku tier and family validation that prevented the creation of Hyperscale PRMS pools (#28178)
• azurerm_search_service - the partition_count property can now be up to 3 when using basic sku (#28105)

v4.12.0

FEATURES:

• New Data Source: azurerm_mssql_managed_database (#27026)

BUG FIXES:

• azurerm_application_insights_api_key - fix condition that nil checks the list of available API keys to prevent an indefinate loop when keys created outside of Terraform are present (#28037)
• azurerm_data_factory_linked_service_azure_sql_database - send tenant_id only if it has been specified (#28120)
• azurerm_eventgrid_event_subscription - fix crash when flattening advanced_filter (#28110)
• azurerm_virtual_network_gateway - fix crash issue when specifying root_certificate or revoked_certificate (#28099)

ENHANCEMENTS:

• dependencies - update go-azure-sdk to v0.20241128.1112539 (#28137)
• containerapps - update api version to 2024-03-01 (#28074)
• Search - update api version to 2024-06-01-preview (#27803)
• Data Source: azurerm_logic_app_standard - add support for the public_network_access property (#27913)
• Data Source: azurerm_search_service - add support for the customer_managed_key_encryption_compliance_status property (#27478)
• azurerm_container_registry_task - add validation on cpu as well as on agent_pool_nameand agent_setting (#28098)
• azurerm_databricks_workspace - add support for the enhanced_security_compliance block (#26606)
• azurerm_eventhub - deprecate namespace_name and resource_group_name in favour of namespace_id (#28055)
• azurerm_logic_app_standard - add support for the public_network_access property (#27913)
• azurerm_search_service - add support for the customer_managed_key_encryption_compliance_status property (#27478)
• azurerm_cosmosdb_account - add support for value EnableNoSQLFullTextSearch in the capabilities.name property (#28114)

v4.11.0

NOTES:

• New ephemeral resources azurerm_key_vault_certificate and azurerm_key_vault_secret now support ephemeral values

FEATURES:

• New Ephemeral Resource: azurerm_key_vault_certificate (#28083)
• New Ephemeral Resource: azurerm_key_vault_secret (#28083)
• New Resource: azurerm_eventgrid_namespace (#27682)

ENHANCEMENTS:

• dependencies: update hashicorp/go-azure-sdk to v0.20241118.1115603 (#28075)
• batch - upgrade api version to 2024-07-01 (#27982)
• containerregistry - upgrade api version to 2023-11-01-preview (#27983)
• azurerm_application_gateway - 1.1 is now accepted as a valid rule_set_version in the waf_configuration block (#28039)
• azurerm_arc_machine - add support for the identity and tags properties (#27987)
• azurerm_container_app - secret.name now accepts up to 253 characters and . (#27935)
• azurerm_network_manager - scope_accesses now accepts Routing (#28033)
• azurerm_network_watcher_flow_log - add support for the target_resource_id property (#26015)
• azurerm_role_assignment - condition_version will be defaulted to 2.0 when condition has been set (#27189)
• azurerm_subnet - Informatica.DataManagement/organizations is a valid service_delegation (#27993)
• azurerm_virtual_network - Informatica.DataManagement/organizations is a valid service_delegation (#27993)
• azurerm_web_application_firewall_policy - 1.1 is now accepted as a valid version for Microsoft_BotManagerRuleSet rule types (#28039)

BUG:

• azurerm_api_management - public_ip_address_id is no longer required when zone has been set (#27976)
• azurerm_api_management_diagnostic - raise and error when operation_name_format is used with and identity that is not applicationinsights (#27630)
• azurerm_api_management_api_diagnostic - raise and error when operation_name_format is used with and identity that is not applicationinsights (#27630)
• azurerm_application_gateway - rewrite_rule_set can be supplied when using Basic sku (#28011)
• azurerm_container_registry_token_password - correctly mark as gone if container registry token doesn't exist (#27232)
• azurerm_kusto_cluster - allowed_fqdn and allowed_ip_ranges can now be set to empty lists (#27529)
• azurerm_linux_function_app_slot - create content settings when using a consumpton plan (#25412)
• azurerm_virtual_network_gatway - updating ip_configuration now recreates the resource (#27828)

v4.10.0

BREAKING CHANGES:

• dependencies - update cognitive to 2024-10-01, due to a behavioural change in this version of the API, the primary_access_key and secondary_access_key can not be retrieved if local_authentication_enabled has been set to false. These properties that may have had values previously will now be empty. This has affected the azurerm_ai_services and azurerm_cognitive_account resources as well as the azurerm_cognitive_account data source (#27851)

FEATURES:

• New Data Source: azurerm_key_vault_managed_hardware_security_module_key (#27827)
• New Resource: azurerm_netapp_backup_vault (#27188)
• New Resource: azurerm_netapp_backup_policy (#27188)

ENHANCEMENTS:

• dependencies: update terraform-plugin-framework to version v1.13.0 (#27936)
• dependencies: update terraform-plugin-framework-validators to version v0.14.0 (#27936)
• dependencies: update terraform-plugin-go to version v0.25.0 (#27936)
• dependencies: update terraform-plugin-mux to version v0.17.0 (#27936)
• dependencies: update terraform-plugin-sdk/v2 to version v2.35.0 (#27936)
• Data Source: azurerm_bastion_host - add support for the zones property (#27909)
• azurerm_application_gateway - support more values for the status_code property (#27535)
• azurerm_bastion_host - support for the zones property (#27909)
• azurerm_communication_service - support for usgov region (#27919)
• azurerm_email_communication_service - support for usgov region added (#27919)
• azurerm_linux_function_app - support for .NET 9 (#27879)
• azurerm_linux_function_app_slot - support for .NET 9 (#27879)
• azurerm_linux_web_app - support for .NET 9 (#27879)
• azurerm_linux_web_app_slot - support for .NET 9 (#27879)
• azurerm_windows_web_app - support for .NET 9 (#27879)
• azurerm_windows_web_app_slot - support for .NET 9 (#27879)
• azurerm_windows_function_app - support for .NET 9 (#27879)
• azurerm_windows_function_app_slot - support for .NET 9 (#27879)

BUG FIXES:

• azurerm_log_analytics_workspace_table - use the subscription from workspace ID (#27590)
• azurerm_traffic_manager_external_endpoint - the value for priority will be dynamically assigned by the API (#27966)
• azurerm_traffic_manager_azure_endpoint - the value for priority will be dynamically assigned by the API (#27966)

v4.9.0

FEATURES:

• New Resource: azurerm_dynatrace_monitor (#27432)
• New Resource: azurerm_dashboard_grafana_managed_private_endpoint (#27781)
• New Resource: azurerm_data_protection_backup_instance_mysql_flexible_server (#27464)
• New Resource: azurerm_mongo_cluster (#27636)
• New Resource: azurerm_stack_hci_network_interface (#26888)

ENHANCEMENTS:

• dependencies - update go-azure-sdk to v0.20241104.1140654 (#27896)
• dependencies - update go-azure-helpers to v0.71.0 (#27897)
• dependencies - update golang-jwt to v4.5.1 (#27938)
• storage - allow azurerm_storage_account to be used in Data Plane restrictive environments (#27818)
• azurerm_cognitive_deployment - sku.0.name now supports DataZoneStandard (#27926)
• azurerm_mssql_managed_database - support for the tags property (#27857)
• azurerm_oracle_cloud_vm_cluster - support for the domain, scan_listener_port_tcp, scan_listener_port_tcp_ssl and zone_id properties (#27808)
• azurerm_public_ip_prefix - support for the sku_tier property (#27882)
• azurerm_public_ip - support for the domain_name_label_scope property (#27748)
• azurerm_subnet - default_outbound_access_enabled can now be updated (#27858)
• azurerm_storage_container - support for the storage_account_id property (#27733)
• azurerm_storage_share - support for the storage_account_id property (#27733)

v3.117.0

SPECIAL NOTES: This 3.x release is a special, one-off, back-port of functionality for azurerm_storage_account to enable users to deploy this resource in environments which block / are restrictive of Data Plane access, thus preventing the resource being created and/or managed. This functionality is back-ported from the v4.9.0 release. Users migrating from this release to the 4.x line, should upgrade directly to v4.9.0 or later, as these features are not compatible with earlier releases of 4.x.

FEATURES:

• New Resource: azurerm_storage_account_queue_properties (#27819)
• New Resource: azurerm_storage_account_static_website (#27819)
• New Provider Feature - storage data_plane_available feature flag (#27819)

ENHANCEMENTS:

• azurerm_storage_account - can now be created and managed if Data Plane endpoints are blocked by a firewall (#27819)

v4.8.0

FEATURES:

• New Data Source: azurerm_virtual_network_peering (#27530)
• New Resource: azurerm_machine_learning_workspace_network_outbound_rule_fqdn (#27384)
• New Resource: azurerm_stack_hci_extension (#26929)
• New Resource: azurerm_stack_hci_marketplace_gallery_image (#27532)
• New Resource: azurerm_trusted_signing_account (#27720)

ENHANCEMENTS:

• mysql - upgrade api version to 2023-12-30 (#27767)
• network - upgrade api version to 2024-03-01 (#27746)
• azurerm_cosmosdb_account: support for CMK through managed_hsm_key_id property (#26521)
• azurerm_cosmosdb_account - support further versions for mongo_server_version (#27763)
• azurerm_container_app_environment - changing the log_analytics_workspace_id property no longer creates a new resource (#27794)
• azurerm_data_factory_linked_service_azure_sql_database - add support for the credential_name property (#27629)
• azurerm_key_vault_key - expiration_date only recreates the resource when it is removed from the config file (#27813)
• azurerm_kubernetes_cluster - fix issue wheremaintenance_window_auto_upgrade/maintenance_window_auto_upgrade/maintenance_window_node_os might not be read into state (#26915)
• azurerm_kubernetes_cluster - support for the backend_pool_type property (#27596)
• azurerm_kubernetes_cluster - support for the daemonset_eviction_for_empty_nodes_enabled, daemonset_eviction_for_occupied_nodes_enabled, and ignore_daemonsets_utilization_enabled properties (#27588)
• azurerm_load_test - description can now be updated (#27800)
• azurerm_oracle_cloud_vm_cluster - export the ocid property (#27785)
• azurerm_orchestrated_virtual_machine_scale_set - add support for sku_profile block (#27599)
• azurerm_web_application_firewall_policy - add support for policy_settings.0.file_upload_enforcement (#27774)

BUG FIXES:

• azurerm_automation_hybrid_runbook_worker_group - correctly mark resource as gone if it's absent when reading it (#27797)
• azurerm_automation_hybrid_runbook_worker - correctly mark resource as gone if it's absent when reading it (#27797)
• azurerm_automation_python3_package - correctly mark resource as gone if it's absent when reading it (#27797)
• azurerm_data_protection_backup_vault - prevent panic when checking value of cross_region_restore_enabled (#27762)
• azurerm_role_management_policy - fix panic when unmarshalling the policy into a specific type (#27731)
• azurerm_security_center_subscription_pricing - correctly type assert the additional_extension_properties property when building the payload (#27721)
• azurerm_synapse_workspace_aad_admin - will no correctly delete when using azurerm_synapse_workspace_aad_admin with azurerm_synapse_workspace (#27606)
• azurerm_windows_function_app_slot - fixed panic in state migration (#27700)

v4.7.0

FEATURES:

• New Data Source: azurerm_oracle_adbs_character_sets (#27698)
• New Data Source: azurerm_oracle_adbs_national_character_sets (#27698)
• New Data Source: azurerm_oracle_autonomous_database (#27696)
• New Data Source: azurerm_oracle_db_nodes (#27698)
• New Data Source: azurerm_oracle_db_system_shapes (#27698)
• New Data Source: azurerm_oracle_gi_versions (#27698)
• New Resource: azurerm_dev_center_project_pool (#27706)
• New Resource: azurerm_oracle_autonomous_database (#27696)
• New Resource: azurerm_video_indexer_account (#27632)

ENHANCEMENTS:

• Dependencies - update go-azure-sdk to v0.20241021.1074254 (#27713)
• newrelic - upgrade api version to 2024-03-01 (#27135)
• cosmosdb - upgrade api version to 2024-08-15 (#27659)
• azurerm_application_gateway - support for the new Basic SKU value (#27440)
• azurerm_consumption_budget_management_group - the property notification.threshold_type can now be updated (#27511)
• azurerm_consumption_budget_resource_group - the property notification.threshold_type can now be updated (#27511)
• azurerm_container_app - add support for the template.container.readiness_probe.initial_delay and template.container.startup_probe.initial_delay properties (#27551)
• azurerm_mssql_managed_instance - the storage_account_type property can now be updated (#27737)

BUG FIXES:

• azurerm_automation_software_update_configuration - correct validation to not allow 5 and allow -1 (#25574)
• azurerm_cosmosdb_sql_container - fix recreation logic for partition_key_version (#27692)
• azurerm_mssql_database - updating short term retention policy now works as expected (#27714)
• azurerm_network_watcher_flow_log - fix issue where tags were not being updated (#27389)
• azurerm_postgresql_flexible_server_virtual_endpoint - retrieve and parse replica_server_id for cross-region scenarios as well as remove custom poller for the delete operation (#27509)

v4.6.0

FEATURES:

• New Resource: azurerm_dev_center_attached_network (#27638)
• New Resource: azurerm_oracle_cloud_vm_cluster (#27678)
• New Resource: azurerm_oracle_exadata_infrastructure (#27678)
• New Data Source: azurerm_oracle_cloud_vm_cluster (#27678)
• New Data Source: azurerm_oracle_db_servers (#27678)
• New Data Source: azurerm_oracle_exadata_infrastructure (#27678)

ENHANCEMENTS:

• redisenterprise - upgrade api version to 2024-06-01-preview (#27597)
• azurerm_app_configuration - support for premium sku (#27674)
• azurerm_container_app - support for the max_inactive_revisions property (#27598)
• azurerm_kubernetes_cluster - remove lock on subnets (#27583)
• azurerm_nginx_deployment - allow updates for sku (#27604)
• azurerm_fluid_relay_server - support for the customer_managed_key property (#27581)
• azurerm_linux_virtual_machine - support the UBUNTU_PRO value for the license_type property (#27534)

BUGS:

• azurerm_api_management_api_diagnostic - do not set OperationNameFormat when the identifier property is azuremonitor (#27456)
• azurerm_api_management - prevent a panic (#27649)
• azurerm_mssql_database - make short_term_retention_policy.backup_interval_in_hours computed (#27656)