v3.79.0

ENHANCEMENTS:

• provider: log instead of error when RPs are unavailable when validating RP registrations (#23380)
• azurerm_arc_kuberenetes_cluster_extension_resource - the version and release_train properties can now be set simultaneously (#23692)
• azurerm_container_apps - support for the ingress.exposed_port property (#23752)
• azurerm_cosmosdb_postgresql_cluster - read replica clusters can be created without specifying administrator_login_password property (#23750)
• azurerm_managed_application - arrays can be supplied in the parameter_values property (#23754)
• azurerm_storage_management_policy - support for properties rule.*.actions.*.base_blob.0.tier_to_cold_after_days_since_{modification|last_access_time|creation}_greater_than and rule.*.actions.*.{snapshot|version}.0.tier_to_cold_after_days_since_creation_greater_than (#23574)

BUG FIXES:

• azurerm_api_management_diagnostic - the operation_name_format attribute will only be sent if identifier is set to applicationinsights (#23736)
• azurerm_backup_policy_vm - fix payload by using current datetime (#23586)
• azurerm_kubernetes_cluster - the custom_ca_trust_certificates_base64 property can not be removed, only updated (#23737)

v3.78.0

FEATURES:

• New Resource: azurerm_resource_management_private_link_association (#23546)

ENHANCEMENTS:

• dependencies: updating to v0.20231025.1113325 of github.com/hashicorp/go-azure-sdk (#23684)
• dependencies: updating to v1.58.3 of google.golang.org/grpc (#23691)
• dependencies: updating search service from 2022-09-01 to 2023-11-01 (#23698)
• Data Source: azurerm_monitor_workspace - export query_endpoint (#23629)
• azurerm_express_route_port - support for macsec_sci_enabled (#23625)
• azurerm_eventhub_namespace_customer_managed_key - support for the user_assigned_identity_id property (#23635)
• azurerm_postgresql_flexible_server - private_dns_zone_id is no longer ForceNew and case is suppressed (#23660)
• azurerm_synapse_workspace - add support for azuread_authentication_only (#23659)
• azurerm_redis_enterprise_cluster - support for new location Japan East (#23696)
• azurerm_search_service - support for semantic_search_sku field (#23698)

BUG FIXES:

• azurerm_palo_alto_next_generation_firewall_virtual_network_local_rulestack - added lock for ruleStackID (#23601)
• azurerm_cognitive_deployment - remove forceNew tag from rai_policy_name (#23697)
• azurerm_backup_policy_vm - fix payload by using current datetime (#23586)

v3.77.0

FEATURES:

• New Resources: azurerm_application_load_balancer_frontend (#23411)
• New Resources: azurerm_dev_center (#23538)
• New Resources: azurerm_dev_center_project (#23538)

ENHANCEMENTS:

• dependencies: updating to v0.62.0 of github.com/hashicorp/go-azure-helpers (#23581)
• dependencies: updating Kusto SDK from 2023-05-02 to 2023-08-15 (#23598)
• dependencies: updating nginx from 2022-08-01 to 2023-04-01 (#23583)
• netapp: updating to use API Version 2023-05-01 (#23576)
• springcloud: updating to use API Version 2023-09-01-preview (#23544)
• storage: updating to use API Version 2023-01-01 (#23543)
• internal/sdk: fixing an issue where struct fields containing removedInNextMajorVersion wouldn't be decoded correctly (#23564)
• internal/sdk: struct tag parsing is now handled consistently during both encoding and decoding (#23568)
• provider: the roll_instances_when_required provider feature in the virtual_machine_scale_set block is now optional (#22976)
• Data Source: azurerm_automation_account: refactoring the remaining usage of Azure/azure-sdk-for-go to use hashicorp/go-azure-sdk (#23555)
• azurerm_automation_account: refactoring the remaining usage of Azure/azure-sdk-for-go to use hashicorp/go-azure-sdk (#23555)
• azurerm_resource_deployment_script_azure_cli - improve validation for the version property to support newer versions (#23370)
• azurerm_resource_deployment_script_azure_power_shell - improve validation for the version property to support newer versions (#23370)
• azurerm_nginx_deployment - support for the capacity and email properties (#23596)

BUG FIXES:

• Data Source: azurerm_virtual_hub_connection - export the inbound_route_map_id, outbound_route_map_id, and static_vnet_local_route_override_criteria attributes in the routing block, and fix a bug where these attributes could not be set (#23491)
• azurerm_cdn_frontdoor_rule - the url_filename_condition properties match_values is now optional if operator is set to Any (#23541)
• azurerm_shared_image_gallery - added the Private and Groups options for the sharing.permission property (#23570)
• azurerm_redis_cache - fixed incorrect ssl values for redis_primary_connection_string and secondary_connection_string (#23575)
• azurerm_monitor_activity_log_alert - the recommend_category property now can be set to HighAvailability (#23605)
• azurerm_recovery_services_vault - the encryption property can now be used with the cross_region_restore_enabled property (#23618)
• azurerm_storage_account_customer_managed_key - prevent a panic when the keyvault id is empty (#23599)

v3.76.0

FEATURES:

• New Resource: azurerm_security_center_storage_defender (#23242)
• New Resource: azurerm_spring_cloud_application_insights_application_performance_monitoring (#23107)

ENHANCEMENTS:

• provider: updating to build using Go 1.21.3 (#23514)
• provider: the roll_instances_when_required provider feature in the virtual_machine_scale_set block is now optional (#22976)
• dependencies: updating to v0.20231012.1141427 of github.com/hashicorp/go-azure-sdk (#23534)
• Data Source: azurerm_application_gateway - support for backend_http_settings, global, gateway_ip_configuration and additional attributes (#23318)
• Data Source: azurerm_network_service_tags - export the name attribute (#23382)
• azurerm_cosmosdb_postgresql_cluster - add support for sql_version of 16 and citus_version of 12.1 (#23476)
• azurerm_palo_alto_local_rulestack - correctly normalize the location property (#23483)
• azurerm_static_site - add support for app_settings (#23421)

BUG FIXES:

• azurerm_automation_schedule - fix a bug when updating start_time (#23494)
• azurerm_eventhub - remove ForceNew and check partition_count is not decreased (#23499)
• azurerm_managed_lustre_file_system - update validation for storage_capacity_in_tb according to sku_name in use (#23428)
• azurerm_virtual_machine - fix a crash when the API response for the os_profile block contains nil properties (#23535)

v3.75.0

FEATURES:

• New Resource: azurerm_application_load_balancer (#22517)
• New Resource: azurerm_resource_management_private_link (#23098)

ENHANCEMENTS:

• dependencies: firewall migrated to hashicorp/go-azure-sdk (#22863)
• azurerm_bot_service_azure_bot - add support for the icon_url property (#23114)
• azurerm_cognitive_deployment - capacity property is now updateable (#23251)
• azurerm_container_group - added support for key_vault_user_identity_id (#23332)
• azurerm_data_factory - added support for the publish_enabled property (#2334)
• azurerm_firewall_policy_rule_collection_group - add support for the description property (#23354)
• azurerm_kubernetes_cluster - network_profile.network_policy can be migrated to cilium (#23342)
• azurerm_log_analytics_workspace - add support for the data_collection_rule_id property (#23347)
• azurerm_mysql_flexible_server - add support for the io_scaling_enabled property (#23329)

BUG FIXES:

• azurerm_api_management_api - fix importing openapi format content file issue (#23348)
• azurerm_cdn_frontdoor_rule - allow a cache_duration of 00:00:00 (#23384)
• azurerm_cosmosdb_cassandra_datacenter - sku_name is now updatable (#23419)
• azurerm_key_vault_certificate - fix a bug that prevented soft-deleted certificates from being recovered (#23204)
• azurerm_log_analytics_solution - fix create and update lifecycle of resource by splitting methods (#23333)
• azurerm_management_group_subscription_association - mark resource as gone correctly if not found when retrieving (#23335)
• azurerm_management_lock - add polling after create and delete to check for RP propagation (#23345)
• azurerm_monitor_diagnostic_setting - added validation to ensure at least one of category or category_group is supplied (#23308)
• azurerm_palo_alto_local_rulestack_prefix_list - fix rulestack not being committed on delete (#23362)
• azurerm_palo_alto_local_rulestack_fqdn_list - fix rulestack not being committed on delete (#23362)
• security_center_subscription_pricing_resource - disabled extensions logic now works as expected (#22997)

v3.74.0

NOTES:

• azurerm_synapse_sql_pool - users that have imported azurerm_synapse_sql_pool resources that were created outside of Terraform using an LRS storage account type will need to use ignore_changes to avoid the resource from being destroyed and recreated.

FEATURES:

• New Resource: azurerm_arc_resource_bridge_appliance (#23108)
• New Resource: azurerm_data_factory_dataset_azure_sql_table (#23264)
• New Resource: azurerm_function_app_connection (#23127)

ENHANCEMENTS:

• dependencies: updating to v0.20230918.1115907 of github.com/hashicorp/go-azure-sdk (#23337)
• dependencies: downgrading to v1.12.5 of github.com/rickb777/date (#23296)
• mysql: updating to use API Version 2022-01-01 (#23320)
• azurerm_app_configuration - support for the replica block (#22452)
• azurerm_bot_channel_directline - support for user_upload_enabled, endpoint_parameters_enabled, and storage_enabled (#23149)
• azurerm_container_app - support for scale rules (#23294)
• azurerm_container_app_environment - support for zone redundancy (#23313)
• azurerm_container_group - support for the key_vault_user_identity_id property for Customer Managed Keys (#23332)
• azurerm_cosmosdb_account - support for MongoDB connection strings (#23331)
• azurerm_data_factory_dataset_delimited_text - support for the dynamic_file_system_enabled, dynamic_path_enabled, and dynamic_filename_enabled properties (#23261)
• azurerm_data_factory_dataset_parquet - support for the azure_blob_fs_location block (#23261)
• azurerm_monitor_diagnostic_setting - validation to ensure either category or category_group are supplied in enabled_log and log blocks (#23308)
• azurerm_network_interface - support for the auxiliary_mode and auxiliary_sku properties (#22979)
• azurerm_postgresql_flexible_server - increased the maximum supported value for storage_mb (#23277)
• azurerm_shared_image_version - support for the replicated_region_deletion_enabled and target_region.exclude_from_latest_enabled properties (#23147)
• azurerm_storage_account - support for setting domain_name and domain_guid for AADKERB (#22833)
• azurerm_storage_account_customer_managed_key - support for cross-tenant customer-managed keys with the federated_identity_client_id, and key_vault_uri properties (#20356)
• azurerm_web_application_firewall_policy - support for the rate_limit_duration, rate_limit_threshold, group_rate_limit_by, and request_body_inspect_limit_in_kb properties (#23239)

BUG FIXES:

• Data Source: azurerm_container_app_environment: fix log_analytics_workspace_name output to correct value (#23298)
• azurerm_api_management_api - set the service_url property when importing the resource (#23011)
• azurerm_app_configuration - prevent crash by nil checking the encryption configuration (#23302)
• azurerm_app_configuration_feature - update percentage_filter_value to accept correct type of float (#23263)
• azurerm_container_app - fix an issue with commands and args being overwritten when using multiple containers (#23338)
• azurerm_key_vault_certificate - fix issue where certificates couldn't be recovered anymore (#23204)
• azurerm_key_vault_key - the ForceNew when expiration_date is removed from the config file (#23327)
• azurerm_linux_function_app - fix a bug in setting the storage settings when using Elastic Premium plans (#21212)
• azurerm_linux_web_app - fix docker app stack update (#23303)
• azurerm_linux_web_app - fix crash in auto heal expansion (#21328)
• azurerm_linux_web_app_slot - fix docker app stack update (#23303)
• azurerm_linux_web_app_slot - fix crash in auto heal expansion (#21328)
• azurerm_log_analytics_solution - fix bug where the resource wasn't handling successful creation on subsequent applies (#23312)
• azurerm_management_group_subscription_association - fix bug to correctly mark resource as gone if not found during read (#23335)
• azurerm_mssql_elasticpool - remove check that prevents license_type from being set for certain skus (#23262)
• azurerm_servicebus_queue - fixing an issue where auto_delete_on_idle couldn't be set to P10675199DT2H48M5.4775807S (#23296)
• azurerm_servicebus_topic - fixing an issue where auto_delete_on_idle couldn't be set to P10675199DT2H48M5.4775807S (#23296)
• azurerm_storage_account - prevent sending unsupported blob properties in payload for Storage account kind (#23288)
• azurerm_synapse_sql_pool - expose storage_account_type (#23217)
• azurerm_windows_function_app - fix a bug in setting the storage settings when using Elastic Premium plans (#21212)
• azurerm_windows_web_app - fix docker app stack update (#23303)
• azurerm_windows_web_app_slot - fix docker app stack update (#23303)

DEPRECATIONS:

• azurerm_application_gateway - deprecate Standard and WAF skus (#23310)
• azurerm_bot_channel_web_chat - deprecate site_names in favour of site block (#23161)
• azurerm_monitor_diagnostic_setting - deprecate retention_policy in favour of azurerm_storage_management_policy (#23260)

v3.73.0

FEATURES:

• New Resource: azurerm_iothub_endpoint_cosmosdb_account (#23065)
• New Resource: azurerm_virtual_hub_routing_intent (#23138)

ENHANCEMENTS:

• dependencies: updating to v0.1.1 of github.com/btubbs/datetime (#23221)
• dependencies: updating to v1.3.1 of github.com/google/uuid (#23221)
• dependencies: updating to v0.61.0 of github.com/hashicorp/go-azure-helpers (#23249)
• dependencies: updating to v0.20230907.1113401 of github.com/hashicorp/go-azure-sdk (#23221)
• dependencies: updating to v1.5.0 of github.com/hashicorp/go-hclog (#23221)
• dependencies: updating to v2.29.0 of github.com/hashicorp/terraform-plugin-sdk/v2 (#23221)
• dependencies: updating to v1.5.1 of github.com/hashicorp/terraform-plugin-testing (#23221)
• dependencies: updating to v1.20.2 of github.com/rickb777/date (#23221)
• dependencies: updating to v0.13.0 of golang.org/x/crypto (#23221)
• dependencies: updating to v0.15.0 of golang.org/x/net (#23221)
• dependencies: updating to v0.13.0 of golang.org/x/tools (#23221)
• azurerm_bot_channel_ms_teams - support for deployment_environment (#23122)
• azurerm_managed_disk - updating to use API Version 2023-04-02 (#23233)
• azurerm_managed_disk - support for optimized_frequent_attach_enabled (#23241)
• azurerm_managed_disk - support for performance_plus_enabled (#23241)
• azurerm_maps_account - support for local_authentication_enabled (#23216)
• azurerm_mssql_elasticpool - support for configuring license_type when using the Hyperscale sku (#23256)
• azurerm_security_center_assessment_policy - refactoring to use hashicorp/go-azure-sdk (#23158)

BUG FIXES:

• azurerm_api_management - split create and update methods (#23259)
• azurerm_api_management_backend - fixing a panic when flattening the credentials block (#23219)
• azurerm_key_vault_certificate - fixing a regression where certificates from a custom/unknown issuer would be polled indefinitely (#23214)
• azurerm_redis_cache - prevent sending redis_configuration.aof_backup_enabled when the sku is not Premium to avoid API error (#22774)
• azurerm_web_application_firewall_policy - capture and toggle state of custom_rule blocks with an enabled field (#23163)

v3.72.0

FEATURES:

• Provider Feature: subscription cancellation on destroy can now be disabled via the provider features block (#19936)
• New Data Source: netapp_volume_quota_rule (#23042)
• New Resource: azurerm_automation_python3_package (#23087)
• New Resource: netapp_volume_quota_rule (#23042)

ENHANCEMENTS:

• dependencies: updating to v0.20230906.1160501 of github.com/hashicorp/go-azure-sdk (#23191)
• containerapps: updating to API Version 2023-05-01 (#22804)
• keyvault: upgrade remaining resources to 2023-02-01 (#23089)
• redisenterprise: updating to API Version 2023-07-01 (#23178)
• vpngateway: updating to use hashicorp/go-azure-sdk (#22906)
• internal/sdk: typed resources using a custom importer now get a timed context (#23160)
• azurerm_batch_pool - support for accelerated_networking_enabled (#23021)
• azurerm_batch_pool - support for automatic_upgrade_enabled (#23021)
• azurerm_bot_channel_direct_line_speech - support for the cognitive_account_id property (#23106)
• azurerm_bot_service_azure_bot - support for the local_authentication_enabled property (#23096)
• azurerm_container_app_environment - support for the dapr_application_insights_connection_string (#23080)
• azurerm_cosmosdb_cassandra_datacenter - refactoring to use hashicorp/go-azure-sdk (#23110)
• azurerm_cosmosdb_cassandra_datacenter - updating to API Version 2023-04-15 (#23110)
• azurerm_kubernetes_cluster - Azure CNI can be updated to use overlay (#22709)
• azurerm_monitor_diagnostic_setting - deprecating retention_policy within enabled_log (#23029)
• azurerm_mssql_database - split create and update methods (#23209)
• azurerm_postgresql_database - collation can now be set to English_United Kingdom.1252 (#23171)
• azurerm_postgresql_flexible_database - collation can now be set to English_United Kingdom.1252 (#23171)
• azurerm_postgresql_flexible_server - support for the auto_grow_enabled property (#23069)
• azurerm_redis_enterprise_cluster - support for Flash clusters in Brazil South (#23200)
• azurerm_resource_provider_registration - refactoring to use hashicorp/go-azure-sdk (#23072)
• azurerm_virtual_machine_extension - support for provision_after_extensions (#23124)
• azurerm_virtual_network_gateway - increasing the default timeout for create to 90m (#23003)
• azurerm_virtual_hub_connection - support for inbound_route_map_id, outbound_route_map_id, and static_vnet_local_route_override_criteria properties (#23049)

BUG FIXES:

• azurerm_api_management_api_policy - added state migration to mutate id's ending in policies/policy (#23128)
• azurerm_api_management_api_operation_policy - added state migration to mutate id's ending in policies/policy (#23128)
• azurerm_api_management_product_policy - added state migration to mutate id's ending in policies/policy (#23128)
• azurerm_automation_account - fixes logic for local_authentication_enabled (#23082)
• azurerm_key_vault_managed_storage_account - check id can be parsed correctly before setting it in state (#23022)
• azurerm_monitor_diagnostic_setting - fix enabled_log feature flagged schema (#23093)
• azurerm_pim_active_role_assignment: polling for the duration of the timeout, rather than a fixed 5 minute value (#22932)
• azurerm_policy_set_definition - only sending parameters when a value is configured (#23155)
• azurerm_synapse_workspace - fixes index out-of-range panic when parsing storage_data_lake_gen2_filesystem_id (#23019)
• machine_learning_datastore_* - fixes container ids (#23140)
• azurerm_key_vault_certificate - id now points to new version when certificate is updated (#23135)
• azurerm_site_recovery_replicated_vm - update network_interface diff so replicated items now can be updated (#23199)

DEPRECATION:

• Data Source: azure_monitor_log_profile - Azure is retiring Azure Log Profiles on the 30th of September 2026 (#23146)
• azure_monitor_log_profile - Azure is retiring Azure Log Profiles on the 30th of September 2026 (#23146)

v3.71.0

BREAKING CHANGES:

• App Service win32_status property - Due to a change made in the service to the underlying type of the Auto Heal property win32_status combined with a prior bug (in v3.62.1 and earlier) causing the value of this property to be stored incorrectly in state as an empty string, the value of this property could not be updated or state migrated to accommodate the necessary type change in the state. This results in the resources named above returning an error of a number is needed when decoding the state for this value. Unfortunately, this is a breaking change and will require users of this field to change their Terraform Configuration. The field win32_status has been replaced by win32_status_code (this remains an int, as in 3.63.0 onwards) for azurerm_linux_web_app, azurerm_linux_web_app_slot, azurerm_windows_web_app, azurerm_windows_web_app_slot resources. (#23075)

FEATURES:

• New Resource: azurerm_databricks_workspace_root_dbfs_customer_managed_key (#22579)

ENHANCEMENTS:

• dependencies: updating to v0.20230824.1130652 of github.com/hashicorp/go-azure-sdk (#23076)
• trafficmanager: updating to use the transport layer from hashicorp/go-azure-sdk rather than Azure/go-autorest (#22579)
• webpubsub: updating to use the transport layer from hashicorp/go-azure-sdk rather than Azure/go-autorest (#22579)
• automation: upgrade remaining resources to 2022-08-08 (#22989)
• azurerm_storage_management_policy - move to hashicorp/go-azure-sdk (#23035)
• Data Source: azurerm_disk_encryption_set - support for the identity block (#23005)
• azurerm_container_group - support for the sku and (init_)container.*.security properties (#23034)
• azurerm_kubernetes_cluster - extend allowed ranges for various sysctl_config attribute ranges (#23077)
• azurerm_kubernetes_cluster_node_pool - extend allowed ranges for various sysctl_config attribute ranges (#23077)
• azurerm_kubernetes_cluster - clusters can be updated to use the cilium dataplane by setting the value in ebpf_data_plane (#22952)
• azurerm_linux_virtual_machine_scale_set - cancel rolling upgrades that are in progress before destroying the resource (#22991)
• azurerm_servicebus_namespace - support for network_rule_set block (#23057)
• azurerm_windows_virtual_machine_scale_set - cancel rolling upgrades that are in progress before destroying the resource (#22991)
• azurerm_synapse_spark_pool - support addtional values for the node_size_family property (#23040)

BUG FIXES:

• azurerm_api_management_policy - fixes an error caused by a migration (#23018)
• azurerm_kubernetes_cluster - deprecate public_network_access_enabled and prevent sending it to the API since it isn't functional (#22478)

v3.70.0

FEATURES:

• New Resource: azurerm_mssql_virtual_machine_availability_group_listener (#22808)
• New Resource: azurerm_mssql_virtual_machine_group (#22808)

ENHANCEMENTS:

• dependencies: updating to v0.20230815.1165905 of github.com/hashicorp/go-azure-sdk (#22981)
• apimanagement: updating to use hashicorp/go-azure-sdk (#22783)
• cosmos: updating to use the base layer from hashicorp/go-azure-sdk rather than Azure/go-autorest (#22874)
• devtestlabs: updating to use the base layer from hashicorp/go-azure-sdk rather than Azure/go-autorest (#22981)
• policy: updating to use the base layer from hashicorp/go-azure-sdk rather than Azure/go-autorest (#22874)
• postgresql: updating to use the base layer from hashicorp/go-azure-sdk rather than Azure/go-autorest (#22874)
• recoveryservices: updating to use the base layer from hashicorp/go-azure-sdk rather than Azure/go-autorest (#22874)
• resources: updating to use the base layer from hashicorp/go-azure-sdk rather than Azure/go-autorest (#22874)
• storage: updating Storage Account and Storage Blob Container to use Common IDs to enable migrating to hashicorp/go-azure-sdk in the future (#22915)
• Data Source: azurerm_kubernetes_cluster - add support for the current_kubernetes_version property (#22986)
• azurerm_mssql_virtual_machine - add support for the sql_virtual_machine_group_id and wsfc_domain_credential properties (#22808)
• azurerm_netapp_pool - size_in_tb can be sized down to 2 TB (#22943)
• azurerm_stack_hci_cluster - add support for the automanage_configuration_id property (#22857)
• Data Source: azurerm_disk_encryption_set - now exports key_vault_key_url (#22893)
• azurerm_disk_encryption_set - now exports key_vault_key_url (#22893)

BUG FIXES:

• azurerm_cognitive_deployment - add lock on parent resource to prevent errors when deleting the resource (#22940)
• azurerm_cost_management_scheduled_action - fix update for email_address_sender (#22930)
• azurerm_disk_encryption_set - now correctly supports key rotation by specifying a versionless Key ID when setting auto_key_rotation_enabled to true (#22893)
• azurerm_iothub_dps - updating the validation for target within the ip_filter_rule block to match the values defined in the Azure API Definitions (#22891)
• azurerm_postgresql_database - reworking the validation for database collation (#22928)
• azurerm_postgresql_flexible_database - reworking the validation for database collation (#22928)
• azurerm_storage_management_policy - check for an existing resource to prevent overwriting property values (#22966)
• azurerm_virtual_network_gateway_connection - custom_bgp_addresses.secondary is now Optional rather than Required (#22912)
• azurerm_web_application_firewall_policy - fix handling not found in read (#22982)