v5.2.0

5.2.0 (August 20, 2026)

FEATURES:

• New List Resource: azurerm_user_assigned_identity (#32667)

ENHANCEMENTS:

• dependencies: go - update to 1.26.6 (#33141)
• dependencies: go-azure-sdk - update to v0.20260811.1225050 (#33079)
• azurerm_cdn_frontdoor_batch_rule_set - allow / as an input to rule.conditions.request_path.values (#33023)
• azurerm_databricks_workspace - remove a redundant key vault existence check (#33136)
• azurerm_databricks_workspace_root_dbfs_customer_managed_key - remove a redundant key vault existence check (#33136)
• azurerm_logic_app_standard - add support for v10.0 to site_config.dotnet_framework_version (#33116)
• azurerm_mongo_cluster - administrator_password is no longer required when create_mode is Default to support Entra ID-only authentication (#32092)
• azurerm_redhat_openshift_cluster - add support for the network_profile.load_balancer_profile block (#32473)
• azurerm_redhat_openshift_cluster - add support for the platform_workload_identity_profile block (#32473)
• azurerm_role_assignment - the condition, condition_version, and description properties can now be updated in-place (#32714)
• azurerm_snapshot - create_option now supports CopyStart (#32834)

BUG FIXES:

• azurerm_cognitive_account_project - added create/update/delete lock on parent AccountID to make sure operations on parent account are processed in serial (required by Cognitive service) (#33151)
• azurerm_databricks_workspace - fix a persistent diff on removal of managed_disk_cmk_key_vault_key_id or managed_services_cmk_key_vault_key_id (#33136)
• azurerm_oracle_exadata_infrastructure - fix an issue that prevented users from deploying with no zones set (#33011)

v5.1.0

5.1.0 (August 13, 2026)

ENHANCEMENTS:

• dependencies: azurerm_linux_virtual_machine_scale_set - update to API version 2025-04-01 (#31586)
• dependencies: azurerm_orchestrated_virtual_machine_scale_set - update to API version 2025-04-01 (#31586)
• dependencies: azurerm_virtual_machine_scale_set - update to API version 2025-04-01 (#31586)
• dependencies: azurerm_virtual_machine_scale_set_extension - update to API version 2025-04-01 (#31586)
• dependencies: azurerm_windows_virtual_machine_scale_set - update to API version 2025-04-01 (#31586)
• dependencies: codesigning - update to API version 2025-10-13 (#31714)
• azurerm_linux_virtual_machine - encryption_at_host_enabled can now be set to true when os_disk.security_encryption_type is set to DiskWithVMGuestState (#32885)
• azurerm_linux_virtual_machine_scale_set - encryption_at_host_enabled can now be set to true when os_disk.security_encryption_type is set to DiskWithVMGuestState (#32885)
• azurerm_managed_devops_pool - add support for the CreatorOnly value to azure_devops_organization.permission.kind property (#32753)
• azurerm_windows_virtual_machine - encryption_at_host_enabled can now be set to true when os_disk.security_encryption_type is set to DiskWithVMGuestState (#32885)
• azurerm_windows_virtual_machine_scale_set - encryption_at_host_enabled can now be set to true when os_disk.security_encryption_type is set to DiskWithVMGuestState (#32885)

BUG FIXES:

• azurerm_cdn_frontdoor_batch_ruleset - parse rule.actions.route_configuration_override.origin_group.cdn_frontdoor_origin_group_id case-insensitively and normalize the resulting value to prevent diffs (#32980)
• azurerm_cdn_frontdoor_route - parse cdn_frontdoor_origin_group_id case-insensitively and normalize the resulting value to prevent diffs (#32980)
• azurerm_cdn_frontdoor_secret - fix an incorrect type assertion (#32982)
• azurerm_dev_center_project - parse dev_center_id case-insensitively and normalize the resulting value to prevent diffs (#32798)
• azurerm_eventhub - now prevents the status property from being set to SendDisabled on create (#33071)
• azurerm_storage_container - add a state migration for the id field, fixing the upgrade path from 4.x to 5.x (#32978)
• azurerm_storage_queue - extend state migration to handle a malformed resource_manager_id (#32979)
• azurerm_storage_share - add a state migration for the id field, fixing the upgrade path from 4.x to 5.x (#33075)

v5.0.1

5.0.1 (July 30, 2026)

NOTES:

In addition to the bug fixes below, a number of resource documentation pages and the 5.0-upgrade-guide have been updated.

BUG FIXES:

• azurerm_cdn_frontdoor_origin - fix a regression that prevented valid values as input to private_link.private_link_target_id (#32912)
• azurerm_storage_queue - add a state migration for the id field, fixing the upgrade path from 4.x to 5.x (#32914)
• azurerm_storage_table_entity - add a state migration for the storage_table_id field, fixing the upgrade path from 4.x to 5.x (#32929)

v5.0.0

5.0.0 (July 27, 2026)

NOTES:

• Major Version: Version 5.0 of the Azure Provider is a major version - some behaviours have changed and some deprecated fields/resources have been removed - please refer to the 5.0 upgrade guide for more information.
• When upgrading to v5.0 of the AzureRM Provider, we recommend upgrading to the latest version of Terraform Core (which can be found here).

FEATURES:

• New Action: azurerm_web_app_set_slot_distribution (#32364)
• New Datasource adds azurerm_kubernetes_automatic_cluster_datasource (#32881)

ENHANCEMENTS:

• dependencies: grpc update to 1.82.1 (#32852)
• dependencies: loadbalancers - update to API version 2025-01-01 (#32644)
• azurerm_cognitive_account_rai_policy - the content_filter.severity_threshold property is now optional (#32100)
• azurerm_container_registry - the trust_policy_enabled property has been deprecated and removed from the provider (#32752)
• azurerm_dashboard_grafana - the 11 value for the grafana_major_version property has been deprecated and the property now supports 13 (#32777)
• azurerm_log_analytics_workspace - add support for the internet_ingestion_access_type and internet_query_access_type properties (#32562)
• azurerm_subnet - add support for the network_security_group_id_wo and network_security_group_id_wo_version properties (#32847)
• azurerm_subnet - add support for the route_table_id_wo and route_table_id_wo_version properties (#32847)
• azurerm_subnet - export the network_security_group_id property (#32847)
• azurerm_subnet - export the route_table_id property (#32847)
• azurerm_windows_web_app - add support for ~24 to site_config.application_stack.node_version (#32840)
• azurerm_windows_web_app_slot - add support for ~24 to site_config.application_stack.node_version (#32840)
• cdn - migrate to go-azure-sdk (#32849)
• sentinel - migrate to go-azure-sdk (#32759)

v4.81.0

4.81.0 (July 14, 2026)

FEATURES:

• New Data Source: azurerm_cdn_frontdoor_batch_rule_set (#32733)
• New List Resource: azurerm_backup_policy_vm (#32736)
• New List Resource: azurerm_cdn_frontdoor_batch_rule_set (#32733)
• New List Resource: azurerm_cognitive_account_connection_account_key (#30981)
• New List Resource: azurerm_cognitive_account_connection_account_managed_identity (#30981)
• New List Resource: azurerm_cognitive_account_connection_api_key ((#30981)
• New List Resource: azurerm_cognitive_account_connection_custom_keys (#30981)
• New List Resource: azurerm_cognitive_account_connection_entra_id (#30981)
• New List Resource: azurerm_federated_identity_credential (#32672)
• New List Resource: azurerm_monitor_scheduled_query_rules_alert (#32701)
• New List Resource: azurerm_servicebus_customer_managed_identity (#32315)
• New List Resource: azurerm_web_pubsub_custom_certificate (#32192)
• New Resource: azurerm_cdn_frontdoor_batch_rule_set (#32733)
• New Resource: azurerm_cognitive_account_connection_account_key (#30981)
• New Resource: azurerm_cognitive_account_connection_account_managed_identity (#30981)
• New Resource: azurerm_cognitive_account_connection_api_key ((#30981)
• New Resource: azurerm_cognitive_account_connection_custom_keys (#30981)
• New Resource: azurerm_cognitive_account_connection_entra_id (#30981)
• New Resource: azurerm_log_analytics_workspace_table_microsoft (#31754)
• azurerm_servicebus_subscription - added new provider feature flag that will remove the "$Default" rule immediately on new subscription creation (#32452)
• New Resource: azurerm_storage_account_table_properties (#32282)

ENHANCEMENTS:

• dependencies: go - update to 1.26.5
• dependencies: x/crypto - update to v0.54.0
• dependencies: cdn - update to API version 2025-12-01 (#32719)
• dependencies: compute - update to API version 2025-04-01 (#32592)
• dependencies: go-azure-helpers - update to v0.81.1 (#32732)
• dependencies: go-azure-sdk - update to v0.20260709.1191450 (#32768)
• dependencies: keyvault - update to API version 2026-02-01 (#32320)
• Data Source: azurerm_logic_app_standard - add new return attribute storage_key_vault_secret_id which will be set if the app service "AzureWebJobsStorage" property had a KeyVault reference format (#32571)
• azurerm_cdn_frontdoor_endpoint - migrate to go-azure-sdk (#32741)
• azurerm_container_registry Add support for azuread_authentication_as_arm_policy_enabled, role_assignment_mode and network_rule_bypass_allowed_for_tasks properties (#31667)
• azurerm_logic_app_standard - add attribute storage_key_vault_secret_id which can be used in place of storage_account_name and storage_account_key, allowing the app service property "AzureWebJobsStorage" to reference a key vault secret in the format "@Microsoft.KeyVault(SecretUri=...)" (#32571)
• azurerm_orchestrated_virtual_machine_scale_set - support for the tags property within the network_interface block (#32592)

BUG FIXES:

• azurerm_cdn_frontdoor_custom_domain - fix a validation regression that prevented previously valid wildcard inputs to the host_name property (#32738)
• azurerm_network_security_perimeter_association - fix create/update methods to poll for async operation completion before returning (#32742)
• azurerm_palo_alto_next_generation_firewall_virtual_hub_strata_cloud_manager - fix an issue that set arguments not present in schema causing an error (#32768)
• azurerm_palo_alto_next_generation_firewall_virtual_network_strata_cloud_manager - fix an issue that set arguments not present in schema causing an error (#32768)
• azurerm_virtual_hub_connection - remote_virtual_network_id value will now be parsed case insensitive (#32734)

v4.80.0

4.80.0 (July 02, 2026)

ENHANCEMENTS:

• dependencies: go-azure-sdk - update to v0.20260629.1154953 (#32691)
• dependencies: managedhsm - update to API version 2026-02-01 (#32377)
• azurerm_cdn_frontdoor_custom_domain - add basic validation for the host_name property (#32349)
• azurerm_cdn_frontdoor_custom_domain - improve validation for additional host_name constraints when tls.certificate_type is ManagedCertificate (#32349)

BUG FIXES:

• azurerm_machine_learning_datastore_fileshare - fix 5.0 migration bug for the storage_fileshare_id property (#32586)

v4.79.0

4.79.0 (June 25, 2026)

FEATURES:

• New Action: azurerm_netapp_volume_bucket_credentials (#32319)
• New Data Source: azurerm_netapp_volume_bucket (#32319)
• New Data Source: azurerm_netapp_volume_bucket_with_server(#32319)
• New List Resource: azurerm_netapp_volume_bucket (#32319)
• New List Resource: azurerm_netapp_volume_bucket_with_server(#32319)
• New List Resource: azurerm_signalr_service_custom_certificate (#32114)
• New Resource: azurerm_netapp_volume_bucket (#32319)
• New Resource: azurerm_netapp_volume_bucket_with_server(#32319)

ENHANCEMENTS:

• azurerm_batch_job - migrate to go-azure-sdk (#32662)
• azurerm_data_protection_backup_instance_data_lake_storage - increase the limit of items for storage_container_names from 100 to 1000 (#32643)
• azurerm_postgresql_flexible_server - add Ddsv6 skus to validation (#32657)
• azurerm_virtual_network_gateway - add support for maximum_scale_unit and minimum_scale_unit (#32647)
• desktopvirtualization - upgrade API version to 2025-10-10 (#32563)

v4.78.0

4.78.0 (June 18, 2026)

FEATURES:

• New List Resource: azurerm_signalr_service_custom_domain (#32124)
• New List Resource: azurerm_storage_sync_server_endpoint (#31988)

ENHANCEMENTS:

• dependencies: go-azure-sdk - update to v0.20260616.1142719 (#32631)
• Data Source: azurerm_network_manager_connectivity_configuration - export the connected_group_address_overlap, connected_group_private_endpoints_scale, and peering_enforcement properties (#31562)
• Data Source: azurerm_storage_container - export the url property (#29036)
• azurerm_kubernetes_cluster - add support KataVmIsolation for workload_runtime (#32579)
• azurerm_kubernetes_cluster_node_pool - add support KataVmIsolation for workload_runtime (#32579)
• azurerm_mssql_managed_instance - add support for the storage_iops property (#32250)
• azurerm_network_manager_connectivity_configuration - add support for the connected_group_address_overlap, connected_group_private_endpoints_scale, and peering_enforcement properties (#31562)
• azurerm_storage_container - export the url property (#29036)

BUG FIXES:

• azurerm_cosmosdb_account - fix an issue that prevented diffs on geo_location.zone_redundant from showing (#32620)
• azurerm_express_route_connection - fix an issue that caused unintentional changes to internet_security_enabled on updates (#32498)
• azurerm_static_web_app - fix an issue that caused updates to fail once a private endpoint was attached (#32631)

v4.77.0

4.77.0 (June 11, 2026)

FEATURES:

• New List Resource: azurerm_key_vault (#32408)
• New List Resource: azurerm_web_pubsub_custom_domain (#32186)

ENHANCEMENTS:

• dependencies: go - update to 1.26.4 (#32539)
• dependencies: go-azure-sdk - update to v0.20260603.1074745 (#32503)
• Data Source: azurerm_storage_blob - the storage_account_name and storage_container_name properties have been deprecated in favour of the storage_container_id property (#32235)
• Data Source: azurerm_storage_table - the storage_account_name property has been deprecated in favour of the storage_account_id property (#32235)
• azurerm_machine_learning_workspace - add support for the storage_account_access_type property (#32514)
• azurerm_storage_blob - the storage_account_name and storage_container_name properties have been deprecated in favour of the storage_container_id property (#32235)
• azurerm_storage_container - the storage_account_name property has been deprecated in favour of the storage_account_id property (#32235)
• azurerm_storage_object_replication - add support for the metrics_enabled property (#32204)
• azurerm_storage_queue - the storage_account_name property has been deprecated in favour of the storage_account_id property (#32235)
• azurerm_storage_table - the storage_account_name property has been deprecated in favour of the storage_account_id property (#32235)

BUG FIXES:

• azurerm_mssql_managed_instance - fix an issue that caused an error when changing from a GP_* SKU to a BC_* SKU (#32560)
• azurerm_network_manager_deployment - add a custom poller to work around an API issue on creation (#32530)
• azurerm_recovery_services_vault_resource_guard_association - normalize resource_guard_id before persisting to state to work around an API issue (#32554)
• azurerm_subnet - fix an issue that incorrectly caused a validation error when increasing ip_address_pool.number_of_ip_addresses (#32500)
• azurerm_virtual_network - fix an issue that incorrectly caused a validation error when increasing ip_address_pool.number_of_ip_addresses (#32500)

v4.76.0

4.76.0 (June 04, 2026)

ENHANCEMENTS:

• Action: azurerm_virtual_machine_power - power_action now supports deallocate (#32492)
• azurerm_key_vault_key - add support for the release_policy block (#32478)

BUG FIXES:

• azurerm_federated_identity_credential - fix update logic, preventing import errors on updates (#32522)
• azurerm_netapp_account - the update function now uses the PUT operation to fix a removal issue with the active_directory property (#32494)
• azurerm_netapp_account - fix drift detection for the active_directory and identity properties (#32494)
• azurerm_netapp_volume_group_oracle - fix validation for the application_identifier property (#32499)
• azurerm_oracle_resource_anchor - fix validation for the name property to allow hyphens (#32481)