v4.70.0

4.70.0 (April 23, 2026)

FEATURES:

• New List Resource: azurerm_storage_mover (#32165)
• New List Resource: azurerm_storage_mover_agent (#32166)
• New List Resource: azurerm_storage_mover_source_endpoint (#32167)

ENHANCEMENTS:

• dependencies: azurerm_synapse_managed_private_endpoint - update to API version 2021-06-01-preview (#32153)
• dependencies: cosmosdb/mongorbacs - update to API version 2025-10-15 (#32164)
• dependencies: giovanni update to v0.29.0 (#32188)
• dependencies: go-azure-sdk - update to v0.20260417.1195006 (#31974)
• azurerm_backup_policy_vm - add support for the consistency_type property (#32203)
• azurerm_bot_channel_directline - export the extension_key_1 and extension_key_2 properties (#30242)
• azurerm_bot_web_app - add support for the microsoft_app_type, microsoft_app_tenant_id, and microsoft_app_user_assigned_identity_id properties (#30459)
• azurerm_dashboard_grafana- add support for the sku_size property (#31047)
• azurerm_key_vault_key - migrate to go-azure-sdk (#31806)
• azurerm_machine_learning_datastore_blobstorage - improved storage account retrieval (#32222)
• azurerm_nat_gateway_public_ip_association - add support for IPv6 public IP addresses (#32176)
• azurerm_nat_gateway_public_ip_prefix_association - add support for IPv6 public IP prefixes (#32195)
• azurerm_postgresql_flexible_server - add support for confidential compute server type SKU (#32209)
• azurerm_synapse_managed_private_endpoint - migrate to go-azure-sdk (#32153)
• azurerm_synapse_managed_private_endpoint - add support for the fully_qualified_domain_names property (#32153)

BUG FIXES:

• Data Source: azurerm_storage_account_sas - fix a regression that caused missing permissions in the sas property (#32234)
• azurerm_container_app_environment - fix potential nil pointer dereferences to prevent panics (#32198)

v4.69.0

4.69.0 (April 16, 2026)

FEATURES:

• New List Resource: azurerm_traffic_manager_profile (#31977)
• New List Resource: azurerm_web_pubsub (#32126)
• New Resource: azurerm_automation_runtime_environment_package (#32022)
• New Resource: azurerm_container_app_environment_managed_certificate (#31137)

ENHANCEMENTS:

• dependencies: Go - update to 1.25.9 (#32148)
• dependencies: kubernetesconfiguration/fluxconfiguration - update to API version 2025-04-01 (#32080)
• Data Source: azurerm_kubernetes_cluster_node_pool - export the node_image_version property (#32108)
• Data Source: azurerm_storage_account_blob_container_sas - expand permissions block to include new fields (#32149)
• Data Source: azurerm_storage_account_sas - expand permissions block to include new fields (#32149)
• Data Source: azurerm_storage_share - export the rbac_scope_id property (#31194)
• azurerm_bot_channels_registration - add support for the microsoft_app_type, microsoft_app_tenant_id, and microsoft_app_user_assigned_identity_id properties (#30457)
• azurerm_cdn_frontdoor_route - the cdn_frontdoor_origin_ids property is now optional, allowing users to use the depends_on meta-argument instead (#29350)
• azurerm_cognitive_deployment - the rai_policy_name property is now Optional + Computed as Azure returns a value when not set in the creation request (#32131)
• azurerm_container_app - add support for identity_id property in custom_scale_rule block (#29777)
• azurerm_key_vault - added object-name max length validation for all key vault entries (keys, secrets, certs, etc) (#30665)
• azurerm_kubernetes_cluster_node_pool - export the node_image_version property (#32108)
• azurerm_kubernetes_flux_configuration - the git_repository.provider property now supports GitHub (#32080)
• azurerm_monitor_scheduled_query_rules_alert_v2 - add support for email_subject within action block (#32132)
• azurerm_storage_share - export the rbac_scope_id property (#31194)

BUG FIXES:

• azurerm_linux_virtual_machine - parse os_managed_disk_id insensitively as Azure returns static segments cased inconsistently (#32145)
• azurerm_private_dns_resolver_inbound_endpoint - the ip_configurations.private_ip_address, ip_configurations.private_ip_allocation_method, and ip_configurations.subnet_id properties are now ForceNew as the API does not allow updating these values (#31088)

v4.68.0

4.68.0 (April 09, 2026)

FEATURES:

• New Data Source: azurerm_managed_devops_pool (#28325)
• New List Resource: azurerm_private_dns_cname_record (#31833)
• New Resource: azurerm_data_protection_backup_instance_data_lake_storage (#32044)
• New Resource: azurerm_managed_devops_pool (#28325)

ENHANCEMENTS:

• dependencies: go-azure-sdk - upgrade to v0.20260407.1111603 (#32112)
• Data Source: azurerm_bastion_host - export private_only_enabled (#32042)
• Data Source: azurerm_key_vault - improve validation for the name field to prevent apply time errors (#30453)
• Data Source: azurerm_mssql_managed_instance - add support for the general_purpose_v2_enabled property (#29303)
• azurerm_app_configuration_feature - Add support for custom_filter (#30160)
• azurerm_bastion_host - add support for a "Private-only" deployment and export private_only_enabled (#32042)
• azurerm_cosmosdb_account - add support for the EnableFabricNetworkAclBypass capability (#31836)
• azurerm_key_vault - improve validation for the name field to prevent apply time errors (#30453)
• azurerm_kubernetes_cluster - changing oidc_issuer_enabled from true to false now forces resource recreation as the API does not support this (#32117)
• azurerm_kubernetes_cluster_node_pool - lock on subnet ID instead of subnet name to prevent unnecessary serialization (#32001)
• azurerm_mssql_managed_instance - export the general_purpose_v2_enabled property (#29303)
• azurerm_netapp_volume - add support for data_protection_advanced_ransomware (#32099)
• azurerm_private_endpoint - the request_message and is_manual_connection properties are now validated at plan time (#31705)
• azurerm_storage_account - the is_hns_enabled property is now validated at plan time (#30536)

BUG FIXES:

• azurerm_databricks_workspace - fix the update behaviour for the access_connector_id property (#32025)
• azurerm_function_app_flex_consumption - add locking on virtual_network_subnet_id to prevent conflicts if the same subnet is used for multiple deployments (#32091)
• azurerm_kubernetes_cluster - fix an issue that prevented oidc_issuer_enabled = false from being set on create (#32117)
• azurerm_kubernetes_cluster - fix a diff caused by Azure's default value for oidc_issuer_enabled changing in AKS 1.34+ (#32117)
• azurerm_public_ip - domain_name_label, reverse_fqdn, domain_name_label_scope can now be set to empty (#31699)
• azurerm_resource_group - fix parallelism issue in create_poller (#32123)
• azurerm_storage_account - Remove TLS1_3 as a valid value for min_tls_version (#32072)

v4.67.0

4.67.0 (April 02, 2026)

FEATURES:

• New List Resource: azurerm_storage_sync (#31995)
• New Resource: azurerm_data_protection_backup_policy_data_lake_storage (#31179)
• New Resource: azurerm_eventgrid_namespace_topic (#30104)
• New Resource: azurerm_kubernetes_cluster_deployment_safeguard (#31670)
• New Resource: azurerm_resource_provider_feature_registration (#28303)

ENHANCEMENTS:

• dependencies: go-azure-sdk - upgrade to v0.20260326.1151219 (#32047)
• dependencies: storage - update to API version 2025-06-01 (#32071)
• Data Source: azurerm_application_gateway - export the backend, listener, and routing_rule properties (#30376)
• Data Source: azurerm_logic_app_standard - export the site_config.ip_restriction_default_action property (#31816)
• Data Source: azurerm_mssql_elasticpool - export the high_availability_replica_count property (#31761)
• azurerm_application_gateway - add support for the backend, listener, and routing_rule properties (#30376)
• azurerm_kubernetes_cluster - add support for the Ubuntu2404 OS SKU (#32070)
• azurerm_kubernetes_cluster - improve validation for network_profile.0.advanced_networking (#31497)
• azurerm_kubernetes_cluster_node_pool - add support for the Ubuntu2404 OS SKU (#32070)
• azurerm_kusto_attached_database_configuration - add support for the database_name_override, database_name_prefix, sharing.functions_to_exclude, and sharing.functions_to_include properties (#31470)
• azurerm_logic_app_standard - add support for the site_config.scm_ip_restriction_default_action property (#32043)
• azurerm_logic_app_standard - add support for the site_config.ip_restriction_default_action property (#31816)
• azurerm_mssql_elasticpool - add support for the high_availability_replica_count property (#31761)
• azurerm_nat_gateway - add support for the StandardV2 SKU (#31197)
• azurerm_public_ip - add support for the StandardV2 SKU (#31197)
• azurerm_public_ip_prefix - add support for the StandardV2 SKU (#31197)

BUG FIXES:

• azurerm_backup_policy_vm - fix the Update function to properly set all timestamps when any of backup.time, retention_daily, retention_weekly, retention_montly, or retention_yearly change (#31969)
• azurerm_cosmosdb_account - fix an API error caused by backup.interval_in_minutes and backup.retention_in_hours being set to 0 in the API payload when not defined in config (#32037)
• azurerm_machine_learning_compute_instance - fix setting node_public_ip_enabled into state (#31725)
• azurerm_search_service - mark query_keys.key value as sensitive (#32053) (#32053)

v4.66.0

4.66.0 (March 26, 2026)

FEATURES:

• New Data Source: azurerm_container_app_environment_storage (#32007)
• New List Resource: azurerm_video_indexer_account (#31978)

ENHANCEMENTS:

• dependencies: Go - upgrade to version 1.25.8 (#31907)
• azurerm_bastion_host - Upgrade API to 2025-01-01 (#32030)
• azurerm_kubernetes_cluster - add support for migration from Azure or Kubenet CNI to Azure CNI Overlay (#30959)
• azurerm_search_service: add support for endpoint attribute (#32010)
• cognitive_account_rai_blocklist_resource - add support for the tags property (#31871)

BUG FIXES:

• azurerm_container_app - fix failure_count_threshold validation values for container app probes (#31989)
• azurerm_linux_function_app_slot - fix API error when removing auth_settings_v2 configuration from a previously deployed appservice slot (#32008)
• azurerm_linux_web_app_slot - fix API error when removing auth_settings_v2 configuration from a previously deployed appservice slot (#32008)
• azurerm_log_analytics_workspace - preserve default value of local_authentication_enabled (#32004)
• azurerm_windows_function_app_slot - fix API error when removing auth_settings_v2 configuration from a previously deployed appservice slot (#32008)
• azurerm_windows_web_app_slot - fix API error when removing auth_settings_v2 configuration from a previously deployed appservice slot (#32008)

v4.65.0

4.65.0 (March 19, 2026)

ENHANCEMENTS:

• dependencies: go-azure-sdk - update to v0.20260312.1165223
• azurerm_federated_identity_credential - the parent_id property has been renamed to user_assigned_identity_id (#31921)

BUG FIXES:

• azurerm_kubernetes_cluster_node_pool - max_surge and max_unavailable are no longer required for spot node pools (#31129)
• azurerm_log_analytics_workspace_table - fix validation for basic plan (#30925)
• azurerm_managed_disk - fix nil pointer dereference when updating disk_access_id (#31955)

v4.64.0

4.64.0 (March 12, 2026)

FEATURES:

• New List Resource: azurerm_storage_account_customer_managed_key (#31805) (#31805)

ENHANCEMENTS:

• dependencies: containerservice - partial upgrade to API version 2025-03-01 (#31838)
• dependencies: containerservice - partial upgrade to API version 2025-10-01 (#31401)
• dependencies: paloalto - update to API version 2025-10-08 (#31570)
• Data Source: azurerm_kubernetes_cluster - export the bootstrap_profile and network_profile.outbound_type attributes (#30983)
• azurerm_subnet - add support for the PureStorage.Block/storagePools value in the delegation.service_delegation.name property (#31878)
• azurerm_virtual_network - add support for the PureStorage.Block/storagePools value in the subnet.delegation.service_delegation.name property (#31878)

BUG FIXES:

• azurerm_purview_account - use correct API values for identity type (#31905) (#31905)
• azurerm_recovery_services_vault - skip request to modify soft delete state for vaults that are currently set to AlwaysON due to Azure's new secure-by-default policy
• azurerm_resource_provider_registration - add additional polling logic to prevent errors due to inconsistent API behaviour (#31909)

v4.63.0

4.63.0 (March 05, 2026)

FEATURES:

• provider: added the enhanced_validation block with the locations and resource_providers properties to replace the ARM_PROVIDER_ENHANCED_VALIDATION environment variable (#31678)

ENHANCEMENTS:

• azurerm_site_recovery_replicated_vm- add support for PremiumV2_LRS in the target_replica_disk_type property (#31890)

BUG FIXES:

• azurerm_analysis_services_server - fix an issue that prevented creation of the resource with power_bi_service_enabled set to false and one or more ipv4_firewall_rule blocks defined (#31870)
• azurerm_analysis_services_server - fix an issue that prevented adding or removing ipv4_firewall_rule blocks without also modifying power_bi_service_enabled (#31870)
• azurerm_linux_web_app, azurerm_windows_web_app, azurerm_windows_function_app, azurerm_linux_function_app, azurerm_function_app_flex_consumption - fix API error when removing auth_settings_v2 configuration from a previously deployed appservice (#31821) (#31821)
• dependencies: dataprotection - downgrade to API version 2025-07-01 due to new validation introduced by Azure on 2025-09-01 that is blocking deployments (#31877)

v4.62.1

4.62.1 (March 02, 2026)

BUG FIXES:

• azurerm_data_factory - fix removal of customer_managed_key_identity_id to no longer send an empty string to Azure, instead sending an empty object (#31858)
• azurerm_data_factory_customer_managed_key - fix a persistent ID parsing error on user_assigned_identity_id when Azure returned an empty string (#31858)
• azurerm_data_factory_customer_managed_key - fix removal of user_assigned_identity_id to no longer send an empty string to Azure, instead sending an empty object (#31858)
• azurerm_linux_function_app_slot - fix an issue that prevented users from deploying a slot to a container-based function app (#31842)

v4.62.0

4.62.0 (February 26, 2026)

FEATURES:

• New List Resource: azurerm_network_ddos_protection_plan (#31768)
• New List Resource: azurerm_private_dns_a_record (#31785)
• New List Resource: azurerm_private_endpoint (#31769)
• New List Resource: azurerm_redis_cache (#31770)
• New List Resource: azurerm_redis_firewall_rule (#31770)
• New List Resource: azurerm_route (#31760)
• New List Resource: azurerm_mssql_elasticpool (#31736)
• New List Resource: azurerm_mssql_virtual_machine (#31737)

ENHANCEMENTS:

• dependencies: databricks - update to API version 2026-01-01 (#31654)
• dependencies: dataprotection - update to API version 2025-09-01 (#31402)
• azurerm_dashboard_grafana - add support for the 12 value in the grafana_major_version property and remove the deprecated 10 value (#31653)
• azurerm_linux_function_app - add support for 25 in the java_version property (#31096)
• azurerm_linux_web_app - add support for 3.14 in the python_version property (#31826)
• azurerm_linux_web_app - add support for 25 in the java_version property (#31096)
• azurerm_linux_web_app_slot - add support for 3.14 in the python_version property (#31826)
• azurerm_windows_function_app - add support for 25 in the java_version property (#31096)
• azurerm_windows_web_app - add support for 25 in the java_version property (#31096)

BUG FIXES:

• azurerm_container_app_job - fix an issue where template.container.startup_probe.initial_delay and template.container.readiness_probe.initial_delay were not set in the API request (#31796)