Update Terraform azurerm to ~> 4.13.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
azurerm (source)	required_provider	minor	~> 4.0.1 -> ~> 4.13.0

---

Release Notes

hashicorp/terraform-provider-azurerm (azurerm)

v4.13.0

Compare Source

ENHANCEMENTS:

• azurerm_cognitive_deployment - support for the dynamic_throttling_enabled property (#​28100)
• azurerm_key_vault_managed_hardware_security_module_key - the key_type property now supports oct-HSM (#​28171)
• azurerm_machine_learning_datastore_datalake_gen2 - can now be used with storage account in a different subscription (#​28123)
• azurerm_network_watcher_flow_log - target_resource_id supports subnets and network interfaces (#​28177)

BUG:

• Data Source: azurerm_logic_app_standard - update the identity property to support User Assigned Identities (#​28158)
• azurerm_cdn_frontdoor_origin_group - update validation of the interval_in_seconds property to match API behaviour (#​28143)
• azurerm_container_group - retrieve log analytics workspace key from config when updating resource (#​28025)
• azurerm_mssql_elasticpool - fix sku tier and family validation that prevented the creation of Hyperscale PRMS pools (#​28178)
• azurerm_search_service - the partition_count property can now be up to 3 when using basic sku (#​28105)

v4.12.0

Compare Source

FEATURES:

• New Data Source: azurerm_mssql_managed_database (#​27026)

BUG FIXES:

• azurerm_application_insights_api_key - fix condition that nil checks the list of available API keys to prevent an indefinate loop when keys created outside of Terraform are present (#​28037)
• azurerm_data_factory_linked_service_azure_sql_database - send tenant_id only if it has been specified (#​28120)
• azurerm_eventgrid_event_subscription - fix crash when flattening advanced_filter (#​28110)
• azurerm_virtual_network_gateway - fix crash issue when specifying root_certificate or revoked_certificate (#​28099)

ENHANCEMENTS:

• dependencies - update go-azure-sdk to v0.20241128.1112539 (#​28137)
• containerapps - update api version to 2024-03-01 (#​28074)
• Search - update api version to 2024-06-01-preview (#​27803)
• Data Source: azurerm_logic_app_standard - add support for the public_network_access property (#​27913)
• Data Source: azurerm_search_service - add support for the customer_managed_key_encryption_compliance_status property (#​27478)
• azurerm_container_registry_task - add validation on cpu as well as on agent_pool_nameand agent_setting (#​28098)
• azurerm_databricks_workspace - add support for the enhanced_security_compliance block (#​26606)
• azurerm_eventhub - deprecate namespace_name and resource_group_name in favour of namespace_id (#​28055)
• azurerm_logic_app_standard - add support for the public_network_access property (#​27913)
• azurerm_search_service - add support for the customer_managed_key_encryption_compliance_status property (#​27478)
• azurerm_cosmosdb_account - add support for value EnableNoSQLFullTextSearch in the capabilities.name property (#​28114)

v4.11.0

Compare Source

NOTES:

• New ephemeral resources azurerm_key_vault_certificate and azurerm_key_vault_secret now support ephemeral values

FEATURES:

• New Ephemeral Resource: azurerm_key_vault_certificate (#​28083)
• New Ephemeral Resource: azurerm_key_vault_secret (#​28083)
• New Resource: azurerm_eventgrid_namespace (#​27682)

ENHANCEMENTS:

• dependencies: update hashicorp/go-azure-sdk to v0.20241118.1115603 (#​28075)
• batch - upgrade api version to 2024-07-01 (#​27982)
• containerregistry - upgrade api version to 2023-11-01-preview (#​27983)
• azurerm_application_gateway - 1.1 is now accepted as a valid rule_set_version in the waf_configuration block (#​28039)
• azurerm_arc_machine - add support for the identity and tags properties (#​27987)
• azurerm_container_app - secret.name now accepts up to 253 characters and . (#​27935)
• azurerm_network_manager - scope_accesses now accepts Routing (#​28033)
• azurerm_network_watcher_flow_log - add support for the target_resource_id property (#​26015)
• azurerm_role_assignment - condition_version will be defaulted to 2.0 when condition has been set (#​27189)
• azurerm_subnet - Informatica.DataManagement/organizations is a valid service_delegation (#​27993)
• azurerm_virtual_network - Informatica.DataManagement/organizations is a valid service_delegation (#​27993)
• azurerm_web_application_firewall_policy - 1.1 is now accepted as a valid version for Microsoft_BotManagerRuleSet rule types (#​28039)

BUG FIXES:

• azurerm_api_management - public_ip_address_id is no longer required when zone has been set (#​27976)
• azurerm_api_management_diagnostic - raise and error when operation_name_format is used with and identity that is not applicationinsights (#​27630)
• azurerm_api_management_api_diagnostic - raise and error when operation_name_format is used with and identity that is not applicationinsights (#​27630)
• azurerm_application_gateway - rewrite_rule_set can be supplied when using Basic sku (#​28011)
• azurerm_container_registry_token_password - correctly mark as gone if container registry token doesn't exist (#​27232)
• azurerm_kusto_cluster - allowed_fqdn and allowed_ip_ranges can now be set to empty lists (#​27529)
• azurerm_linux_function_app_slot - create content settings when using a consumpton plan (#​25412)
• azurerm_virtual_network_gatway - updating ip_configuration now recreates the resource (#​27828)

v4.10.0

Compare Source

BREAKING CHANGES:

• dependencies - update cognitive to 2024-10-01, due to a behavioural change in this version of the API, the primary_access_key and secondary_access_key can not be retrieved if local_authentication_enabled has been set to false. These properties that may have had values previously will now be empty. This has affected the azurerm_ai_services and azurerm_cognitive_account resources as well as the azurerm_cognitive_account data source (#​27851)

FEATURES:

• New Data Source: azurerm_key_vault_managed_hardware_security_module_key (#​27827)
• New Resource: azurerm_netapp_backup_vault (#​27188)
• New Resource: azurerm_netapp_backup_policy (#​27188)

ENHANCEMENTS:

• dependencies: update terraform-plugin-framework to version v1.13.0 (#​27936)
• dependencies: update terraform-plugin-framework-validators to version v0.14.0 (#​27936)
• dependencies: update terraform-plugin-go to version v0.25.0 (#​27936)
• dependencies: update terraform-plugin-mux to version v0.17.0 (#​27936)
• dependencies: update terraform-plugin-sdk/v2 to version v2.35.0 (#​27936)
• Data Source: azurerm_bastion_host - add support for the zones property (#​27909)
• azurerm_application_gateway - support more values for the status_code property (#​27535)
• azurerm_bastion_host - support for the zones property (#​27909)
• azurerm_communication_service - support for usgov region (#​27919)
• azurerm_email_communication_service - support for usgov region added (#​27919)
• azurerm_linux_function_app - support for .NET 9 (#​27879)
• azurerm_linux_function_app_slot - support for .NET 9 (#​27879)
• azurerm_linux_web_app - support for .NET 9 (#​27879)
• azurerm_linux_web_app_slot - support for .NET 9 (#​27879)
• azurerm_windows_web_app - support for .NET 9 (#​27879)
• azurerm_windows_web_app_slot - support for .NET 9 (#​27879)
• azurerm_windows_function_app - support for .NET 9 (#​27879)
• azurerm_windows_function_app_slot - support for .NET 9 (#​27879)

BUG FIXES:

• azurerm_log_analytics_workspace_table - use the subscription from workspace ID (#​27590)
• azurerm_traffic_manager_external_endpoint - the value for priority will be dynamically assigned by the API (#​27966)
• azurerm_traffic_manager_azure_endpoint - the value for priority will be dynamically assigned by the API (#​27966)

v4.9.0

Compare Source

FEATURES:

• New Resource: azurerm_dynatrace_monitor (#​27432)
• New Resource: azurerm_dashboard_grafana_managed_private_endpoint (#​27781)
• New Resource: azurerm_data_protection_backup_instance_mysql_flexible_server (#​27464)
• New Resource: azurerm_mongo_cluster (#​27636)
• New Resource: azurerm_stack_hci_network_interface (#​26888)

ENHANCEMENTS:

• dependencies - update go-azure-sdk to v0.20241104.1140654 (#​27896)
• dependencies - update go-azure-helpers to v0.71.0 (#​27897)
• dependencies - update golang-jwt to v4.5.1 (#​27938)
• storage - allow azurerm_storage_account to be used in Data Plane restrictive environments (#​27818)
• azurerm_cognitive_deployment - sku.0.name now supports DataZoneStandard (#​27926)
• azurerm_mssql_managed_database - support for the tags property (#​27857)
• azurerm_oracle_cloud_vm_cluster - support for the domain, scan_listener_port_tcp, scan_listener_port_tcp_ssl and zone_id properties (#​27808)
• azurerm_public_ip_prefix - support for the sku_tier property (#​27882)
• azurerm_public_ip - support for the domain_name_label_scope property (#​27748)
• azurerm_subnet - default_outbound_access_enabled can now be updated (#​27858)
• azurerm_storage_container - support for the storage_account_id property (#​27733)
• azurerm_storage_share - support for the storage_account_id property (#​27733)

v4.8.0

Compare Source

FEATURES:

• New Data Source: azurerm_virtual_network_peering (#​27530)
• New Resource: azurerm_machine_learning_workspace_network_outbound_rule_fqdn (#​27384)
• New Resource: azurerm_stack_hci_extension (#​26929)
• New Resource: azurerm_stack_hci_marketplace_gallery_image (#​27532)
• New Resource: azurerm_trusted_signing_account (#​27720)

ENHANCEMENTS:

• mysql - upgrade api version to 2023-12-30 (#​27767)
• network - upgrade api version to 2024-03-01 (#​27746)
• azurerm_cosmosdb_account: support for CMK through managed_hsm_key_id property (#​26521)
• azurerm_cosmosdb_account - support further versions for mongo_server_version (#​27763)
• azurerm_container_app_environment - changing the log_analytics_workspace_id property no longer creates a new resource (#​27794)
• azurerm_data_factory_linked_service_azure_sql_database - add support for the credential_name property (#​27629)
• azurerm_key_vault_key - expiration_date only recreates the resource when it is removed from the config file (#​27813)
• azurerm_kubernetes_cluster - fix issue wheremaintenance_window_auto_upgrade/maintenance_window_auto_upgrade/maintenance_window_node_os might not be read into state (#​26915)
• azurerm_kubernetes_cluster - support for the backend_pool_type property (#​27596)
• azurerm_kubernetes_cluster - support for the daemonset_eviction_for_empty_nodes_enabled, daemonset_eviction_for_occupied_nodes_enabled, and ignore_daemonsets_utilization_enabled properties (#​27588)
• azurerm_load_test - description can now be updated (#​27800)
• azurerm_oracle_cloud_vm_cluster - export the ocid property (#​27785)
• azurerm_orchestrated_virtual_machine_scale_set - add support for sku_profile block (#​27599)
• azurerm_web_application_firewall_policy - add support for policy_settings.0.file_upload_enforcement (#​27774)

BUG FIXES:

• azurerm_automation_hybrid_runbook_worker_group - correctly mark resource as gone if it's absent when reading it (#​27797)
• azurerm_automation_hybrid_runbook_worker - correctly mark resource as gone if it's absent when reading it (#​27797)
• azurerm_automation_python3_package - correctly mark resource as gone if it's absent when reading it (#​27797)
• azurerm_data_protection_backup_vault - prevent panic when checking value of cross_region_restore_enabled (#​27762)
• azurerm_role_management_policy - fix panic when unmarshalling the policy into a specific type (#​27731)
• azurerm_security_center_subscription_pricing - correctly type assert the additional_extension_properties property when building the payload (#​27721)
• azurerm_synapse_workspace_aad_admin - will no correctly delete when using azurerm_synapse_workspace_aad_admin with azurerm_synapse_workspace (#​27606)
• azurerm_windows_function_app_slot - fixed panic in state migration (#​27700)

v4.7.0

Compare Source

FEATURES:

• New Data Source: azurerm_oracle_adbs_character_sets (#​27698)
• New Data Source: azurerm_oracle_adbs_national_character_sets (#​27698)
• New Data Source: azurerm_oracle_autonomous_database (#​27696)
• New Data Source: azurerm_oracle_db_nodes (#​27698)
• New Data Source: azurerm_oracle_db_system_shapes (#​27698)
• New Data Source: azurerm_oracle_gi_versions (#​27698)
• New Resource: azurerm_dev_center_project_pool (#​27706)
• New Resource: azurerm_oracle_autonomous_database (#​27696)
• New Resource: azurerm_video_indexer_account (#​27632)

ENHANCEMENTS:

• dependencies - update go-azure-sdk to v0.20241021.1074254 (#​27713)
• newrelic - upgrade api version to 2024-03-01 (#​27135)
• cosmosdb - upgrade api version to 2024-08-15 (#​27659)
• azurerm_application_gateway - support for the new Basic SKU value (#​27440)
• azurerm_consumption_budget_management_group - the property notification.threshold_type can now be updated (#​27511)
• azurerm_consumption_budget_resource_group - the property notification.threshold_type can now be updated (#​27511)
• azurerm_container_app - add support for the template.container.readiness_probe.initial_delay and template.container.startup_probe.initial_delay properties (#​27551)
• azurerm_mssql_managed_instance - the storage_account_type property can now be updated (#​27737)

BUG FIXES:

• azurerm_automation_software_update_configuration - correct validation to not allow 5 and allow -1 (#​25574)
• azurerm_cosmosdb_sql_container - fix recreation logic for partition_key_version (#​27692)
• azurerm_mssql_database - updating short term retention policy now works as expected (#​27714)
• azurerm_network_watcher_flow_log - fix issue where tags were not being updated (#​27389)
• azurerm_postgresql_flexible_server_virtual_endpoint - retrieve and parse replica_server_id for cross-region scenarios as well as remove custom poller for the delete operation (#​27509)

v4.6.0

Compare Source

FEATURES:

• New Resource: azurerm_dev_center_attached_network (#​27638)
• New Resource: azurerm_oracle_cloud_vm_cluster (#​27678)
• New Resource: azurerm_oracle_exadata_infrastructure (#​27678)
• New Data Source: azurerm_oracle_cloud_vm_cluster (#​27678)
• New Data Source: azurerm_oracle_db_servers (#​27678)
• New Data Source: azurerm_oracle_exadata_infrastructure (#​27678)

ENHANCEMENTS:

• redisenterprise - upgrade api version to 2024-06-01-preview (#​27597)
• azurerm_app_configuration - support for premium sku (#​27674)
• azurerm_container_app - support for the max_inactive_revisions property (#​27598)
• azurerm_kubernetes_cluster - remove lock on subnets (#​27583)
• azurerm_nginx_deployment - allow updates for sku (#​27604)
• azurerm_fluid_relay_server - support for the customer_managed_key property (#​27581)
• azurerm_linux_virtual_machine - support the UBUNTU_PRO value for the license_type property (#​27534)

BUGS:

• azurerm_api_management_api_diagnostic - do not set OperationNameFormat when the identifier property is azuremonitor (#​27456)
• azurerm_api_management - prevent a panic (#​27649)
• azurerm_mssql_database - make short_term_retention_policy.backup_interval_in_hours computed (#​27656)

v4.5.0

Compare Source

FEATURES:

• New Resource: azurerm_stack_hci_virtual_hard_disk (#​27474)

ENHANCEMENTS:

• azurerm_bastion_host - support for the Premium SKU and session_recording_enabled property (#​27278)
• azurerm_log_analytics_cluster - the size_gb property now supports all of 100, 200, 300, 400, 500, 1000, 2000, 5000, 10000, 25000, and 50000 (#​27616)
• azurerm_mssql_elasticpool - allow PRMS for the family property (#​27615)

BUG FIXES:

• azurerm_mssql_database - now creates successfully when elastic pool is hyperscale (#​27505)
• azurerm_postgresql_flexible_server_configuration - now locks to prevent conflicts when deploying multiple (#​27355)

v4.4.0

Compare Source

ENHANCEMENTS:

• dependencies - update github.com/hashicorp/go-azure-sdk to v0.20240923.1151247 (#​27491)
• azurerm_site_recovery_replicated_vm - support for the target_virtual_machine_size property (#​27480)

BUG FIXES:

• azurerm_app_service_certificate - key_vault_secret_id can now be versionless (#​27537)
• azurerm_linux_virtual_machine_scale_set - prevent crash when auto_upgrade_minor_version_enabled is nil (#​27353)
• azurerm_role_assignment - correctly parse ID when it's a root or provider scope (#​27237)
• azurerm_storage_blob - source_content is now ForceNew (#​27508)
• azurerm_virtual_network_gateway_connection - revert shared_key to Optional and Computed (#​27560)

v4.3.0

Compare Source

FEATURES:

• New Resource: azurerm_advisor_suppression (#​26177)
• New Resource: azurerm_data_protection_backup_policy_mysql_flexible_server (#​26955)
• New Resource: azurerm_key_vault_managed_hardware_security_module_key_rotation_policy (#​27306)
• New Resource: azurerm_stack_hci_deployment_setting (#​25646)
• New Resource: azurerm_stack_hci_storage_path (#​26509)
• New Data Source: azurerm_vpn_server_configuration (#​27054)

ENHANCEMENTS:

• managementgroups - migrate to hashicorp/go-azure-sdk (#​26430)
• nginx - upgrade api version to 2024-06-01-preview (#​27345)
• azurerm_linux[windows]_web[function]_app[app_slot] - upgrade api version from 2023-01-01 to 2023-12-01 (#​27196)
• azurerm_cosmosdb_account - support for the capability EnableNoSQLVectorSearch (#​27357)azurerm_container_app_custom_domain - fix parsing the certificate ID error #​25972
• azurerm_container_app_custom_domain - support other certificate types (#​25972)
• azurerm_linux_virtual_machine_scale_set - the zones property can now be updated without creating a new resource (#​27288)
• azurerm_orchestrated_virtual_machine_scale_set - the zones property can now be updated without creating a new resource (#​27288)
• azurerm_role_management_policy - support for resource scope (#​27205)
• azurerm_spring_cloud_gateway - changing the environment_variables and sensitive_environment_variables properties no longer creates a new resource (#​27404)
• azurerm_static_web_app - support for the public_network_access_enabled property (#​26345)
• azurerm_shared_image - support for the disk_controller_type_nvme_enabled property (#​26370)
• azurerm_storage_blob - changing the source property no longer creates a new resource (#​27394)
• azurerm_storage_object_replication - changing the rules.x. source_container_name and rules.x. destination_container_name properties no longer creates a new resource (#​27394)
• azurerm_windows_virtual_machine_scale_set - the zones property can now be updated without creating a new resource (#​27288)

BUG FIXES:

• azurerm_application_insights - fix crash when read for DataVolumeCap is nil (#​27352)
• azurerm_container_app - relax validation on the ingress traffic property (#​27396)
• azurerm_log_analytics_workspace_table - will now correctly set total_retention_in_days when sku is Basic (#​27420)

v4.2.0

Compare Source

FEATURES:

• New Resource: azurerm_arc_machine (#​26647)
• New Resource: azurerm_arc_machine_automanage_configuration_assignment (#​26657)

ENHANCEMENTS:

• network/bastionhosts - upgrade api version from 2023-11-01 to 2024-01-01 (#​27277)
• recoveryservices - upgrade recoveryservicessiterecovery from 2022-10-01 to 2024-04-01 (#​27281)
• azurerm_data_protection_backup_vault - support for the property cross_region_restore_enabled property (#​27197)
• azurem_mssql_managed_instance - support for the service_principal_type property (#​27240)

BUG FIXES:

• azurerm_cosmosdb_account - fix crash during state migration (#​27302)
• azurerm_servicebus_queue - fix defaults of the default_message_ttl and auto_delete_on_idle properties (#​27305)

v4.1.0

Compare Source

ENHANCEMENTS:

• dependencies - bump hashicorp/go-azure-sdk to v0.20240903.1111904 (#​27268)
• Virtual Machine Scale Sets - upgrade api version from 2024-03-01 to 2024-07-01 (#​27230)
• hdinsights - update the HDInsights Node definition validation of VM sizes to include new V5 types (#​27270)
• azurerm_api_management_logger - support for the application_insights.connection_string property (#​27137)
• azurerm_bot_service_azure_bot - will now send the value for the developer_app_insights_api_key property (#​27280)
• azurerm_netapp_volume - support for the smb3_protocol_encryption_enabled property (#​27228)
• azurerm_subnet - support Microsoft.DevOpsInfrastructure as delegation service (#​27259)

BUG FIXES:

• azurerm_mysql_flexible_server - correctly set source_server_id in the state file (#​27295)
• azurerm_cosmosdb_account - the ip_range_filter property now supports IPV4 addresses (#​27208)
• azurerm_cosmosdb_account - added state migration for ip_range_filter underlying type change from string to set (#​27276)
• azurerm_linux_virtual_machine - the admin_ssh_key.public_key property now supports ed25519 ssh keys (#​27202)
• azurerm_sentinel_automation_rule - no longer panics when using condition_json (#​27269)
• azurerm_kubernetes_cluster - the host_encryption_enabled and node_public_ip_enabled properties are now set correctly (#​27218)

---

Configuration

📅 Schedule: Branch creation - "after 7am and before 11am every weekday" in timezone Europe/London, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[hmcts-platform-operations]

Plan Result (sandbox - TerraformPlanApply)

No changes. Your infrastructure matches the configuration.

[hmcts-platform-operations]

Plan Result (nonprod - TerraformPlanApply)

No changes. Your infrastructure matches the configuration.

[hmcts-platform-operations]

Plan Result (prod - TerraformPlanApply)

No changes. Your infrastructure matches the configuration.