- Distributed tracing with
ActivitySource
is stable and no longer requires the Experimental feature-flag.
- The
sasToken
parameter is now optional inKeyVaultBackupClient.StartBackup
andStartBackupAsync
. Managed Identity will be used instead ifsasToken
is null. - The
sasToken
parameter is now optional inKeyVaultBackupClient.StartRestore
andStartRestoreAsync
. Managed Identity will be used instead ifsasToken
is null. - The
sasToken
parameter is now optional inKeyVaultBackupClient.StartSelectiveKeyRestore
andStartSelectiveKeyRestoreAsync
. Managed Identity will be used instead ifsasToken
is null.
- When a Key Vault is moved to another tenant, the client is reauthenticated.
- The default service version is now "7.5-preview.1".
The following changes are only breaking from the previous beta. They are not breaking since version 4.4.0 when those types and members did not exist.
- Service version "7.4-preview.1" is not supported.
- Removed
KeyVaultSetting.AsBoolean
andAsString
, and addedAsBoolean
to newKeyVaultSetting.Value
property type,KeyVaultSettingValue
.
- The default service version is now "7.4".
- Added
KeyVaultSettingsClient
to get and update Managed HSM settings.
- The default service version is now "7.4-preview.1".
- Verify the challenge resource matches the vault domain.
This should affect few customers who can set
KeyVaultAdministrationClientOptions.DisableChallengeResourceVerification
totrue
to disable. See https://aka.ms/azsdk/blog/vault-uri for more information.
Changes from both the last release and the last beta include:
- Support multi-tenant authentication against Managed HSM when using Azure.Identity 1.5.0 or newer. (#18359)
- The default service version is now "7.3".
- Updated documentation.
- Support multi-tenant authentication against Managed HSM when using Azure.Identity 1.5.0 or newer. (#18359)
- The default service version is now "7.3-preview".
- Initial release of
KeyVaultAccessControlClient
to managed role assignments and definitions for Managed HSM. - Initial release of
KeyVaultBackupClient
to backup and restore Managed HSM.
- Changed
KeyVaultBackupClient.StartSelectiveRestore
andStartSelectiveRestoreAsync
toStartSelectiveKeyRestore
andStartSelectiveKeyRestoreAsync
. - Return only a
Response
fromKeyVaultAccessControlClient.DeleteRoleAssignment
andDeleteRoleAssignmentAsync
. HTTP 404 responses no longer throw aRequestFailedException
. - Return only a
Response
fromKeyVaultAccessControlClient.DeleteRoleDefinition
andDeleteRoleDefinitionAsync
. HTTP 404 responses no longer throw aRequestFailedException
.
- Updated dependency versions
- Changed parameter order in
KeyVaultAccessControlClient.DeleteRoleDefinition
andKeyVaultAccessControlClient.DeleteRoleDefinitionAsync
. - Changed parameter order in
KeyVaultAccessControlClient.GetRoleDefinition
andKeyVaultAccessControlClient.GetRoleDefinitionAsync
. - Changed parameters for
KeyVaultAccessControlClient.CreateOrUpdateRoleDefinition
andKeyVaultAccessControlClient.CreateOrUpdateRoleDefinitionAsync
to accept newCreateOrUpdateRoleDefinitionOptions
class. - Moved all classes from the
Azure.Security.KeyVault.Administration.Models
namespace toAzure.Security.KeyVault.Administration
. - Renamed
BackupOperation
toKeyVaultBackupOperation
. - Renamed
KeyVaultRoleAssignmentPropertiesWithScope
toKeyVaultRoleAssignmentProperties
. - Renamed
RestoreOperation
toKeyVaultRestoreOperation
. - Renamed
SelectiveKeyRestoreOperation
toKeyVaultSelectiveRestoreOperation
. - Renamed
SelectiveKeyRestoreResult
toKeyVaultSelectiveRestoreResult
.
- Support in
KeyVaultAccessControlClient
to create, update, and delete custom role definitions.
- The default service version is now "7.2" (still in preview).
- Consolidated backup and RBAC client options into a single
KeyVaultAdministrationClientOptions
- Refactored
BackupOperation
to returnBackupResult
- Refactor
RestoreOperation
to returnRestoreResult
- Renamed
KeyVaultPermissions
Not* properties to Deny* - Renamed
KeyVaultRoleAssignment
Type
property toRoleAssignmentType
- Made
KeyVaultRoleAssignmentProperties
internal and moved its properties to method parameters forCreateRoleAssignment
- Bug fixes and performance improvements.
- Add
KeyVaultAccessControlClient
. - Add
KeyVaultBackupClient
.