4.65.0 (March 19, 2026)

ENHANCEMENTS:

• dependencies: go-azure-sdk - update to v0.20260312.1165223
• azurerm_federated_identity_credential - the parent_id property has been renamed to user_assigned_identity_id (#31921)

BUG FIXES:

• azurerm_kubernetes_cluster_node_pool - max_surge and max_unavailable are no longer required for spot node pools (#31129)
• azurerm_log_analytics_workspace_table - fix validation for basic plan (#30925)
• azurerm_managed_disk - fix nil pointer dereference when updating disk_access_id (#31955)

4.64.0 (March 12, 2026)

FEATURES:

• New List Resource: azurerm_storage_account_customer_managed_key (#31805) (#31805)

ENHANCEMENTS:

• dependencies: containerservice - partial upgrade to API version 2025-03-01 (#31838)
• dependencies: containerservice - partial upgrade to API version 2025-10-01 (#31401)
• dependencies: paloalto - update to API version 2025-10-08 (#31570)
• Data Source: azurerm_kubernetes_cluster - export the bootstrap_profile and network_profile.outbound_type attributes (#30983)
• azurerm_subnet - add support for the PureStorage.Block/storagePools value in the delegation.service_delegation.name property (#31878)
• azurerm_virtual_network - add support for the PureStorage.Block/storagePools value in the subnet.delegation.service_delegation.name property (#31878)

BUG FIXES:

• azurerm_purview_account - use correct API values for identity type (#31905) (#31905)
• azurerm_recovery_services_vault - skip request to modify soft delete state for vaults that are currently set to AlwaysON due to Azure's new secure-by-default policy
• azurerm_resource_provider_registration - add additional polling logic to prevent errors due to inconsistent API behaviour (#31909)

4.63.0 (March 05, 2026)

FEATURES:

• provider: added the enhanced_validation block with the locations and resource_providers properties to replace the ARM_PROVIDER_ENHANCED_VALIDATION environment variable (#31678)

ENHANCEMENTS:

• azurerm_site_recovery_replicated_vm- add support for PremiumV2_LRS in the target_replica_disk_type property (#31890)

BUG FIXES:

• azurerm_analysis_services_server - fix an issue that prevented creation of the resource with power_bi_service_enabled set to false and one or more ipv4_firewall_rule blocks defined (#31870)
• azurerm_analysis_services_server - fix an issue that prevented adding or removing ipv4_firewall_rule blocks without also modifying power_bi_service_enabled (#31870)
• azurerm_linux_web_app, azurerm_windows_web_app, azurerm_windows_function_app, azurerm_linux_function_app, azurerm_function_app_flex_consumption - fix API error when removing auth_settings_v2 configuration from a previously deployed appservice (#31821) (#31821)
• dependencies: dataprotection - downgrade to API version 2025-07-01 due to new validation introduced by Azure on 2025-09-01 that is blocking deployments (#31877)

4.62.1 (March 02, 2026)

BUG FIXES:

• azurerm_data_factory - fix removal of customer_managed_key_identity_id to no longer send an empty string to Azure, instead sending an empty object (#31858)
• azurerm_data_factory_customer_managed_key - fix a persistent ID parsing error on user_assigned_identity_id when Azure returned an empty string (#31858)
• azurerm_data_factory_customer_managed_key - fix removal of user_assigned_identity_id to no longer send an empty string to Azure, instead sending an empty object (#31858)
• azurerm_linux_function_app_slot - fix an issue that prevented users from deploying a slot to a container-based function app (#31842)

4.62.0 (February 26, 2026)

FEATURES:

• New List Resource: azurerm_network_ddos_protection_plan (#31768)
• New List Resource: azurerm_private_dns_a_record (#31785)
• New List Resource: azurerm_private_endpoint (#31769)
• New List Resource: azurerm_redis_cache (#31770)
• New List Resource: azurerm_redis_firewall_rule (#31770)
• New List Resource: azurerm_route (#31760)
• New List Resource: azurerm_mssql_elasticpool (#31736)
• New List Resource: azurerm_mssql_virtual_machine (#31737)

ENHANCEMENTS:

• dependencies: databricks - update to API version 2026-01-01 (#31654)
• dependencies: dataprotection - update to API version 2025-09-01 (#31402)
• azurerm_dashboard_grafana - add support for the 12 value in the grafana_major_version property and remove the deprecated 10 value (#31653)
• azurerm_linux_function_app - add support for 25 in the java_version property (#31096)
• azurerm_linux_web_app - add support for 3.14 in the python_version property (#31826)
• azurerm_linux_web_app - add support for 25 in the java_version property (#31096)
• azurerm_linux_web_app_slot - add support for 3.14 in the python_version property (#31826)
• azurerm_windows_function_app - add support for 25 in the java_version property (#31096)
• azurerm_windows_web_app - add support for 25 in the java_version property (#31096)

BUG FIXES:

• azurerm_container_app_job - fix an issue where template.container.startup_probe.initial_delay and template.container.readiness_probe.initial_delay were not set in the API request (#31796)

4.61.0 (February 19, 2026)

FEATURES:

• New List Resource: azurerm_application_gateway (#31749)
• New List Resource: azurerm_application_security_group (#31742)
• New List Resource: azurerm_firewall and azurerm_firewall_policy (#31734)
• New List Resource: azurerm_firewall_policy_rule_collection_group (#31741)
• New List Resource: azurerm_ip_group (#31740)
• New List Resource: azurerm_mssql_database (#31735)
• New List Resource: azurerm_mssql_job_agent (#31738)
• New List Resource: azurerm_mssql_server (#31650)
• New List Resource: azurerm_nat_gatway (#31764)
• New List Resource: azurerm_network_security_rule (#31748)
• New List Resource: azurerm_public_ip (#31762)
• New List Resource: azurerm_web_application_firewall_policy (#31758)

ENHANCEMENTS:

• dependencies: go update to 1.25.5
• dependencies: go-azure-sdk - update to v0.20260212.1143955
• azurerm_managed_redis - sku_name can now be updated (#31203)
• azurerm_managed_redis - default_database must be specified when creating a new resource (#31724)
• azurerm_point_to_site_vpn_gateway - connection_configuration.x.internet_security_enabled can now be updated (#31733)
• azurerm_security_center_storage_defender - update to API version 2025-06-01 (#31759)

BUG FIXES:

• azurerm_managed_redis_geo_replication - fix an issue that prevented linking 3 or more clusters (#31385)
• azurerm_signalr_service - fix setting default values into state, preventing diffs on import for connectivity_logs_enabled, http_request_logs_enabled, and messaging_logs_enabled (#31566)

4.60.0 (February 12, 2026)

FEATURES:

• New Data Source: azurerm_cognitive_account_project (#31605)
• New Data Source: azurerm_managed_redis_access_policy_assignment (#30980)
• New Data Source: azurerm_oracle_database_system_versions (#31001)
• New Resource: azurerm_api_management_workspace_named_value (#31299)
• New List Resource: azurerm_cognitive_account (#31624)
• New Resource: azurerm_data_factory_linked_service_sql_managed_instance (#30896)
• New Resource: azurerm_managed_redis_access_policy_assignment (#30980)
• New List Resource: azurerm_mysql_flexible_database, azurerm_mysql_flexible_server_firewall_rule, azurerm_mysql_flexible_server_configuration - includes addition of Identity (#31646) (#31646)
• New List Resource: azurerm_service_plan (#31610)

ENHANCEMENTS:

• dependencies: containerinstance - update to API version 2025-09-01 (#31640)
• dependencies: storagemover - update to API version 2025-07-01 (#31587)
• Data Source: azurerm_container_app - add support for the read_secrets property allowing users to skip secret retrieval that may trigger authorization errors (#31199)
• azurerm_application_gateway - add support for 2.2 to waf_configuration.rule_set_version (#31674)
• azurerm_application_gateway - add support for MS-ThreatIntel-XSS to waf_configuration.disabled_rule_group.rule_group_name (#31674)
• azurerm_express_route_port - add support for GcmAesXpn128 and GcmAesXpn256 ciphers to link*.macsec_cipher (#30240)
• azurerm_postgresql_flexible_server - add support for cluster (#31315)
• azurerm_web_application_firewall_policy - add support for 2.2 to managed_rules.managed_rule_set.version and managed_rules.exclusion.excluded_rule_set.version (#31674)
• azurerm_web_application_firewall_policy - add support for MS-ThreatIntel-XSS to managed_rules.managed_rule_set.rule_group_override.rule_group_name and managed_rules.exclusion.excluded_rule_set.rule_group.rule_group_name (#31674)
• provider: the subscription_id property can now be populated based on the az CLI (#30251)

BUG FIXES:

• azurerm_express_route_port - fix an issue that caused identity to be removed when updating unrelated properties (#30240)
• azurerm_federated_identity_credential - the id is now built using the resource group name segment from the parent_id preventing unexpected 404 statuses (#30860)
• azurerm_kubernetes_cluster - fixed capacity_reservation_group_id loss during node pool cycling (#30654)
• azurerm_monitor_aad_diagnostic_setting - add polling as a workaround to an eventual consistency issue (#31123)
• list.azurerm_private_dns_zone - fix context handling resolving an issue where this list resources never returned results (#31719)

4.59.0 (February 06, 2026)

ENHANCEMENTS:

• dependencies: go-azure-sdk - update to v0.20260129.1200123 (#31621)
• azurerm_automation_runbook - add support for the runtime_environment_name property (#30992)
• azurerm_kusto_eventgrid_data_connection - update validation for eventhub_consumer_group_name to allow $Default as input (#31551)
• azurerm_linux_function_app - add support for 3.14 to site_config.application_stack.python_version (#31195)
• azurerm_linux_function_app_slot - add support for 3.14 to site_config.application_stack.python_version (#31195)
• azurerm_netapp_volume_group_sap_hana_resource - add support for zone, encryption_key_source, key_vault_private_endpoint_id, and network_features (#31603)
• azurerm_user_assigned_identity - add support for the isolation_scope property (#31216)

BUG FIXES:

• azurerm_kubernetes_cluster - thenetwork_policy property now allows updating from calico to cilium (#31627)
• azurerm_logic_app_trigger_http_request - fix an issue that prevented importing existing resources due to empty trigger inputs (#31433)
• azurerm_mssql_database - fix validation for min_capacity and auto_pause_delay_in_minutes (#31690)

4.58.0 (January 22, 2026)

FEATURES:

• New Data Source: azurerm_network_security_perimeter (#31356)
• New Data Source: azurerm_network_security_perimeter_profile (#31356)
• New Resource: azurerm_network_security_perimeter (#31356)
• New Resource: azurerm_network_security_perimeter_access_rule (#31356)
• New Resource: azurerm_network_security_perimeter_association (#31356)
• New Resource: azurerm_network_security_perimeter_profile (#31356)
• New List Resource: azurerm_resource_group (#31270)

ENHANCEMENTS:

• dependencies: go-azure-sdk - update to v0.20251219.1184026 (#31397)
• azurerm_backup_policy_file_share - add support for backup_tier and snapshot_retention_in_days (#29243)
• azurerm_cosmosdb_cassandra_cluster - version now supports 4.1 and 5.0 (#31424)
• azurerm_function_app_flex_consumption - the maximum_instance_count property now allows values from 1 - 1000 (#31392)
• azurerm_kubernetes_cluster - network_data_plane and network_policy now support updating to cilium (#30958)
• azurerm_kusto_eventhub_data_connection - add support for retrieval_start_date (#31445)
• azurerm_kusto_iothub_data_connection - add support for retrieval_start_date (#31413)
• azurerm_kusto_script - add support for script_level and principal_permissions_action (#31403)
• azurerm_linux_function_app - add support for 24 to site_config.application_stack.node_version (#31098)
• azurerm_linux_function_app_slot - add support for 24 to site_config.application_stack.node_version (#31098)
• azurerm_linux_web_app - add support for 24-lts to site_config.application_stack.node_version (#31098)
• azurerm_linux_web_app_slot - add support for 24-lts to site_config.application_stack.node_version (#31098)
• azurerm_mssql_managed_instance - increase storage_size_in_gb maximum to 32768 (#31387)
• azurerm_netapp_volume_group_oracle - service_level now supports Flexible (#31508)
• azurerm_netapp_volume_group_sap_hana - service_level now supports Flexible (#31508)
• azurerm_network_manager_routing_configuration - add support for the route_table_usage_mode property (#31463)
• azurerm_windows_function_app - add support for ~24 to site_config.application_stack.node_version (#31248)
• azurerm_windows_function_app_slot - add support for ~24 to site_config.application_stack.node_version (#31248)
• data.azurerm_container_registry - admin_password is now sensitive (#31428)

BUG FIXES:

• azurerm_api_management - fix an issue that prevented updates to hostname_configuration.*.key_vault_certificate_id (#31534)
• azurerm_api_management_custom_domain - fix an issue that prevented updates to [management|portal|developer_portal|scm|gateway].key_vault_certificate_id (#31534)
• azurerm_container_app_custom_domain - no longer error during read when container app is deleted outside of Terraform (#31523)
• azurerm_databricks_workspace - removed a legacy workaround that prevented apply operations from succeeding when managed_disk_cmk_rotation_to_latest_version_enabled and tags were updated simultaneously (#31509)
• azurerm_storage_account - can now update a Storage Standard ZRS account (#31431)
• clients - fix correlation id across many clients (#31368)

4.57.0 (December 18, 2025)

NOTE: This release removes the Mobile Network (azurerm_mobile_network*) resources and data sources due to Azure having retired the service

FEATURES:

• New Resource: azurerm_automation_runtime_environment (#30991)

ENHANCEMENTS:

• azurerm_data_protection_backup_vault_customer_managed_key - the key_vault_key_id property now supports keys from a Managed HSM vault (#31365)
• azurerm_kubernetes_cluster - support for the node_provisioning_profile block (#30517)
• azurerm_log_analytics_cluster_customer_managed_key - the key_vault_key_id property now supports keys from a Managed HSM vault (#31375)
• azurerm_mssql_database - the transparent_data_encryption_key_vault_key_id property now supports keys from a Managed HSM vault (#31373)

BUG FIXES:

• azurerm_data_factory - fix ID parsing errors when customer_managed_key_identity_id is an empty string (#28621)
• azurerm_eventhub - partition_count can now be updated for dedicated clusters (#30993)
• azurerm_linux_function_app - fix panic when deployed without all required permissions (#31344)