v0.3.0

[0.3.0] - 2026-07-13

Added

• Add InfoLevel 2 detail view for ASR protected items, showing per-VM sections with replication provider, health, state, active/target locations, test failover status, and A2A-specific RPO, last heartbeat, recovery VM size, and availability zone properties
• Add support for ASR Replication Policies (AsrPolicy) with summary table at InfoLevel 1 and per-policy detail at InfoLevel 2; AppConsistentSnapshot health check warns when app-consistent snapshot frequency is disabled
• Add support for ASR Recovery Plans (AsrRecoveryPlan) with summary table at InfoLevel 1 and per-plan detail at InfoLevel 2
• Add support for ASR Network Mappings (AsrNetworkMapping) with summary table at InfoLevel 1; MappingState health check warns on non-Paired mappings
• Add StorageRedundancy, CrossRegionRestore, SoftDeleteState, SoftDeleteRetentionDays, ImmutabilityState, and PublicNetworkAccess properties to Recovery Services Vault detail view
• Add SoftDeleteEnabled, ImmutabilityEnabled, and PublicNetworkAccess health checks to Recovery Services Vault
• Add support for Azure NetApp Files (NetApp Accounts, Capacity Pools, Volumes, Snapshot Policies, Backup Policies) with per-volume detail, Active Directory and encryption configuration, mount targets, export policy rules, and 5 health checks (pool allocation, AD join status, snapshot policy attachment, backup policy attachment, customer-managed key usage)
• Add support for Management Groups, displaying the full hierarchy with parent/child relationships and direct subscription counts
• Add optional Management Group hierarchy diagram (Options.EnableDiagrams: true) using the AsBuiltReport.Diagram module, showing management group nodes with subscription collections sized to fit a portrait page
• Add Options.DiagramDpi setting to control the raster output resolution of generated diagrams
• Add support for Private DNS Zones, including record set and virtual network link counts with per-zone detail and virtual network link sub-sections at InfoLevel 2
• Add support for Virtual Network Gateways, including gateway type, SKU, BGP settings, active-active mode, generation, and VPN connection detail at InfoLevel 2
• Add support for DDoS Protection Plans, including protected virtual network count and per-plan protected VNet detail at InfoLevel 2
• Add support for Application Gateways, including SKU, WAF mode, HTTP/2, and per-gateway HTTP listener, backend pool, and request routing rule detail at InfoLevel 2
• Add support for Data Collection Rules, including data source types, Log Analytics destination count, and per-rule destination and data flow detail at InfoLevel 2
• Add support for Public IP Addresses, including SKU, allocation method, IP version, DNS settings, availability zones, and associated resource, with unattached IP health check
• Add support for Network Watchers and NSG Flow Logs, including retention policy, traffic analytics enablement, and storage account, with health checks for watcher provisioning state and disabled flow logs
• Add support for VM Scale Sets, including VM size, instance count, orchestration mode, upgrade policy, availability zones, overprovision, single placement group, and identity
• Add support for Maintenance Configurations, including scope, visibility, maintenance window start time, expiration, duration, recurrence, and timezone
• Add support for DNS Forwarding Rulesets, including outbound endpoint associations, per-ruleset forwarding rules with target DNS servers, and virtual network links at InfoLevel 2
• Add Resource Locks reporting to Virtual Networks, Key Vaults, Recovery Services Vaults, Storage Accounts, Firewalls, Private DNS Zones, Route Tables, Virtual Network Gateways, Log Analytics Workspaces, and DDoS Protection Plans; lock name and level (CanNotDelete/ReadOnly) displayed at InfoLevel 2 and above
• Add support for User Assigned Managed Identities, displaying Client ID, Principal ID, and Tenant ID with per-identity detail at InfoLevel 2
• Add support for Automation Accounts, including account state health check and per-account Runbooks, Variables, Schedules, and Credentials sub-sections at InfoLevel 2
• Add support for Diagnostic Settings via cross-resource sweep, displaying Log Analytics workspace, storage account, and Event Hub destinations alongside enabled log category count and metrics status; settings with no log categories enabled flagged as a health check
• Add support for Network Virtual Appliances (Get-AbrAzNetworkVirtualAppliance)
  — identifies third-party NVAs (Palo Alto, Fortinet, Cisco, Check Point, F5, Barracuda,
  SonicWall, Juniper, Riverbed) via Marketplace image publisher with optional tag-based
  fallback (Options.NvaTag). InfoLevel 3 cross-references associated UDR route tables,
  matching against all NIC private IPs on the appliance as well as the frontend private
  IP of any Load Balancer fronting an NVA HA pair. Configurable publisher list via
  Options.NvaPublishers.

Changed

• Update minimum Az module version requirement from 15.3.0 to 16.0.0

Fixed

• Fix Get-AbrAsrProtectedItems - Remove A2A-only filter so all replication providers (HyperV2Azure, InMageAzureV2, etc.) are included in the report
• Fix Get-AbrAsrProtectedItems - Correct FailoverHealth health check direction: now highlights items where test failover has failed (Critical); new NoTestFailover health check warns on items with no test failover performed
• Fix empty per-subscription sections appearing in the report when all enabled resource types have no matching resources in a given subscription
• Fix Get-AbrAsrProtectedItems - Correct ParagraghSummary typo to ParagraphSummary in all language files, which caused the introductory paragraph to render empty
• Fix Get-AbrAzSAShare and Get-AbrAzSAContainer - Switch from data plane API (Get-AzStorageShare, Get-AzStorageContainer) to ARM management plane (Get-AzRmStorageShare, Get-AzRmStorageContainer) to resolve 403 Forbidden errors when storage account shared key access is disabled
• Fix Get-AbrAzSAQueue and Get-AbrAzSATable - Use New-AzStorageContext -UseConnectedAccount for OAuth-based data plane access to resolve 403 Forbidden errors when storage account shared key access is disabled
• Fix unhandled Error while copying content to a stream exception in Invoke-AsBuiltReport.Microsoft.Azure caused by Get-AzTenant, Get-AzLocation, and Get-AzSubscription being called without error handling after authentication; failures are now caught and reported as warnings
• Fix Get-AbrAzLoadBalancer - Correct LoadBalancerImage to Image in all language files; the mismatched localization key caused the Load Balancer architecture diagram to fail rendering and fall back to the ImageError message
• Fix Release.yml - Install AsBuiltReport.Diagram module prior to module manifest validation and publish steps; the missing required module caused the release pipeline to fail