chore(deps): update terraform azurerm to v4.17.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
azurerm (source)	required_provider	minor	4.9.0 -> 4.17.0

---

Release Notes

hashicorp/terraform-provider-azurerm (azurerm)

v4.17.0

Compare Source

FEATURES:

• New Data Source: azurerm_api_management_subscription (#​27824)
• New Resource: azurerm_cognitive_account_rai_policy (#​28013)
• New Resource: azurerm_mssql_job_target_group (#​28492)

ENHANCEMENTS:

• dependencies: network - update to use 2024-05-01 (#​28146)
• dependencies: privatedns - update to use 2024-06-01 (#​28599)
• dependencies: storage - update to use 2023-05-01 (#​27760)
• Data Source: azure_communication_service - add support for the hostname property (#​28620)
• azurerm_api_management - capacity now has a max limit of 50 (#​28648)
• azurerm_backup_protected_vm - add support for feature vm_backup_suspend_protection_and_retain_data_on_destroy (#​27950)
• azurerm_cognitive_account - support for the bypass property (#​28221)
• azure_communication_service - add support for the hostname property (#​28620)
• azurerm_container_app_environment - add support for Azure Monitor as a log destination (#​26047)
• azurerm_mssql_elasticpool- add support for MOPRMS pool type and update validation for PRMS and Gen5 pool types (#​28453)
• azurerm_mssql_managed_instance_transparent_data_encryption - support for the managed_hsm_key_id property (#​28480)
• azurerm_stream_analytics_output_cosmosdb - support for the authentication_mode property (#​28372)
• azurerm_stream_analytics_stream_input_blob - add support for authentication_mode (#​27853)

BUG FIXES:

• azurerm_container_app - update the validation regex for the resource's name (#​28528)
• azurerm_kubernetes_cluster - parse oms_agent.log_analytics_workspace_id insensitively to handle inconsistent casing (#​28575)
• azurerm_kubernetes_flux_configuration - fix issue where removing post_build from a kustomization resulted in an error from the API (#​28590)
• azurerm_linux_virtual_machine_scale_set - prevent crash caused by ommited extensions_to_provision_after_vm_creation block (#​28549)
• azurerm_log_analytics_storage_insights - use subscription from workspace ID when building the resource ID (#​28469)
• azurerm_orchestrated_virtual_machine_scale_set - prevent crash caused by ommited extensions_to_provision_after_vm_creation block (#​28549)
• azurerm_virtual_machine - parse os_disk insensitively to handle inconsistent casing (#​28592)
• azurerm_windows_virtual_machine_scale_set - Prevent crash caused by ommited extensions_to_provision_after_vm_creation block (#​28549)

v4.16.0

Compare Source

NOTE: This release contains a breaking change reverting redisenterprise API version from 2024-10-01 to 2024-06-01-preview as not all regions are currently supported in the 2024-10-01 version

BREAKING CHANGES:

• dependencies - redisenterprise API version reverted from 2024-10-01 to 2024-06-01-preview (#​28516)

FEATURES:

• New Resource: azurerm_container_registry_credential_set (#​27528)
• New Resource: azurerm_mssql_job (#​28456)
• New Resource: azurerm_mssql_job_schedule (#​28456)

ENHANCEMENTS:

• dependencies - update hashicorp/go-azure-sdk to v0.20250115.1141151 (#​28519)
• dependencies - costmanagement update to use 2023-08-01 (#​27680)
• dependencies - postgresql update API version to 2024-08-01 (#​28474)
• azurerm_container_app – support for the termination_grace_period_seconds property (#​28307)
• azurerm_cost_anomaly_alert - add support for the notification_email property (#​27680)
• azurerm_data_protection_backup_vault - support for immutability property (#​27859)
• azurerm_databricks_workspace - fix ignore_changes support (#​28527)
• azurerm_kubernetes_cluster_node_pool - add support for the temporary_name_for_rotation property to allow node pool rotation (#​27791)
• azurerm_linux_function_app - add support for node 22 and java 17 support for JBOSSEAP (#​28472)
• azurerm_linux_web_app - add support for node 22 and java 17 support for JBOSSEAP (#​28472)
• azurerm_windows_function_app - add support for node 22 and java 17 support for JBOSSEAP (#​28472)

BUG FIXES:

• azurerm_logic_app_standard - fix setting public_network_access for conflicting API properties (#​28465)
• azurerm_redis_cache - data_persistence_authentication_method can now be unset (#​27932)
• azurerm_mssql_database - fix bug where verifying TDE might fail to return an error on failure (#​28505)
• azurerm_mssql_database - fix several potential bugs where retry functions could return false negatives for actual errors (#​28505)
• azurerm_private_endpoint - fix a bug where reading Private DNS could error and exit the Read of the resource early without raising an error (#​28505)

v4.15.0

Compare Source

FEATURES:

• New Data Source: azurerm_kubernetes_fleet_manager (#​28278)
• New Resource: azurerm_arc_kubernetes_provisioned_cluster (#​28216)
• New Resource: azurerm_machine_learning_workspace_network_outbound_rule_private_endpoint (#​27874)
• New Resource azurerm_machine_learning_workspace_network_outbound_rule_service_tag (#​27931)
• New Resource azurerm_dynatrace_tag_rules (#​27985)

ENHANCEMENTS:

• dependencies - update tool Go version and bump go-git version to 5.13.0 (#​28425)
• dependencies - update hashicorp/go-azure-sdk to v0.20241212.1154051 (#​28360)
• dependencies - frontdoor - partial update to use 2024-02-01 API (#​28233)
• dependencies - postgresql - update to 2024-08-01 (#​28380)
• dependencies - redisenterprise - update to 2024-10-01 and support for new skus (#​28280)
• Data Source: azurerm_healthcare_dicom_service - add support for the data_partitions_enabled, cors, encryption_key_url and storage properties (#​27375)
• Data Source: azurerm_nginx_deployment - add support for the dataplane_api_endpoint property (#​28379)
• Data Source: azurerm_static_web_app - add support for the repository_url and repository_branch properties (#​27401)
• azurerm_billing_account_cost_management_export - add support for the file_format property (#​27122)
• azurerm_cdn_frontdoor_profile - add support for the identity property (#​28281)
• azurerm_cognitive_deployment - DataZoneProvisionedManaged and GlobalProvisionedManaged skus are now supported (#​28404)
• azurerm_databricks_access_connector - SystemAssigned,UserAssigned identity is now supported (#​28442)
• azurerm_healthcare_dicom_service - add support for the data_partitions_enabled, cors, encryption_key_url and storage properties (#​27375)
• azurerm_kubernetes_flux_configuration - add support for the post_build and wait properties (#​25695)
• azurerm_linux_virtual_machine - export the os_disk.0.id attribute (#​28352)
• azurerm_netapp_volume - make the network_features property Optional/Computed (#​28390)
• azurerm_nginx_deployment - add support for the dataplane_api_endpoint property (#​28379)
• azurerm_resource_group_cost_management_export - add support for the file_format property (#​27122)
• azurerm_site_recovery_replicated_vm - support for the network_interface.recovery_load_balancer_backend_address_pool_ids property (#​28398)
• azurerm_static_web_app - add support for the repository_url, repository_branch and repository_token properties (#​27401)
• azurerm_subscription_cost_management_export - add support for the file_format property (#​27122)
• azurerm_virtual_network - support for the private_endpoint_vnet_policies property (#​27830)
• azurerm_windows_virtual_machine - export the os_disk.0.id attribute (#​28352)
• azurerm_mssql_managed_instance - support for new property azure_active_directory_administrator (#​24801)

BUG FIXES:

• azurerm_api_management - update the capacity property to allow increasing the apim scalability to 31 (#​28427)
• azurerm_automation_software_update_configuration remove deprecated misspelled attribute error_meesage (#​28312)
• azurerm_batch_pool - support for new block security_profile (#​28069)
• azurerm_log_analytics_data_export_rule - now creates successfully without returning 404 (#​27876)
• azurerm_mongo_cluster - remove CustomizeDiff logic for administrator_password to allow the input to be generated by the random_password resource (#​28215)
• azurerm_mongo_cluster - valdation updated so the resource now creates successfully when using create_mode GeoReplica (#​28269)
• azurerm_mssql_managed_instance - allow system and user assigned identities, fix update failure (#​28319)
• azurerm_storage_account - fix error handling for static_website and queue_properties availability checks (#​28279)

v4.14.0

Compare Source

BREAKING CHANGES:

• nginx - update api version to 2024-09-01-preview, this API no longer supports certain properties which have had to be deprecated in the provider for the upgrade (#​27776)
• Data Source: azurerm_nginx_configuration - the protected_file.content property will not be populated and has been deprecated (#​27776)
• Data Source: azurerm_nginx_deployment - the managed_resource_group property will not be populated and has been deprecated (#​27776)
• azurerm_network_function_collector_policy - the API doesn't preserve the ordering of the ipfx_ingestion.source_resource_ids property causing non-empty plans after apply, this property's type has been changed from a list to a set to prevent Terraform from continually trying to recreate this resource. If this property is being referenced anywhere you will need to update your config to convert it to a list before referencing it (#​27915)
• azurerm_nginx_deployment - the managed_resource_group property is no longer supported and has been deprecated (#​27776)

FEATURES:

• New Resource: azurerm_cognitive_account_rai_blocklist (#​28043)
• New Resource: azurerm_fabric_capacity (#​28080)

ENHANCEMENTS:

• dependencies - update go-azure-sdk to v0.20241206.1180327 (#​28211)
• nginx - update api version to 2024-11-01-preview (#​28227)
• azurerm_linux_function_app - add support for preview value 21 for java_version (#​26304)
• azurerm_linux_function_app_slot - support 1.3 for site_config.minimum_tls_version and site_config.scm_minimum_tls_version (#​28016)
• azurerm_linux_web_app - add support for preview value 21 for java_version (#​26304)
• azurerm_orchestrated_virtual_machine_scale_set - support hot patching for 2025-datacenter-azure-edition-core-smalldisk (#​28160)
• azurerm_search_service - add support for the network_rule_bypass_option property (#​28139)
• azurerm_windows_function_app - add support for preview value 21 for java_version (#​26304)
• azurerm_windows_function_app_slot - support 1.3 for site_config.minimum_tls_version and site_config.scm_minimum_tls_version (#​28016)
• azurerm_windows_virtual_machine - support hot patching for 2025-datacenter-azure-edition-core-smalldisk (#​28160)
• azurerm_windows_web_app - add support for preview value 21 for java_version (#​26304)

BUG FIXES:

• azurerm_management_group - fix regression where subscription ID can't be parsed correctly anymore (#​28228)

v4.13.0

Compare Source

ENHANCEMENTS:

• azurerm_cognitive_deployment - support for the dynamic_throttling_enabled property (#​28100)
• azurerm_key_vault_managed_hardware_security_module_key - the key_type property now supports oct-HSM (#​28171)
• azurerm_machine_learning_datastore_datalake_gen2 - can now be used with storage account in a different subscription (#​28123)
• azurerm_network_watcher_flow_log - target_resource_id supports subnets and network interfaces (#​28177)

BUG:

• Data Source: azurerm_logic_app_standard - update the identity property to support User Assigned Identities (#​28158)
• azurerm_cdn_frontdoor_origin_group - update validation of the interval_in_seconds property to match API behaviour (#​28143)
• azurerm_container_group - retrieve log analytics workspace key from config when updating resource (#​28025)
• azurerm_mssql_elasticpool - fix sku tier and family validation that prevented the creation of Hyperscale PRMS pools (#​28178)
• azurerm_search_service - the partition_count property can now be up to 3 when using basic sku (#​28105)

v4.12.0

Compare Source

FEATURES:

• New Data Source: azurerm_mssql_managed_database (#​27026)

BUG FIXES:

• azurerm_application_insights_api_key - fix condition that nil checks the list of available API keys to prevent an indefinate loop when keys created outside of Terraform are present (#​28037)
• azurerm_data_factory_linked_service_azure_sql_database - send tenant_id only if it has been specified (#​28120)
• azurerm_eventgrid_event_subscription - fix crash when flattening advanced_filter (#​28110)
• azurerm_virtual_network_gateway - fix crash issue when specifying root_certificate or revoked_certificate (#​28099)

ENHANCEMENTS:

• dependencies - update go-azure-sdk to v0.20241128.1112539 (#​28137)
• containerapps - update api version to 2024-03-01 (#​28074)
• Search - update api version to 2024-06-01-preview (#​27803)
• Data Source: azurerm_logic_app_standard - add support for the public_network_access property (#​27913)
• Data Source: azurerm_search_service - add support for the customer_managed_key_encryption_compliance_status property (#​27478)
• azurerm_container_registry_task - add validation on cpu as well as on agent_pool_nameand agent_setting (#​28098)
• azurerm_databricks_workspace - add support for the enhanced_security_compliance block (#​26606)
• azurerm_eventhub - deprecate namespace_name and resource_group_name in favour of namespace_id (#​28055)
• azurerm_logic_app_standard - add support for the public_network_access property (#​27913)
• azurerm_search_service - add support for the customer_managed_key_encryption_compliance_status property (#​27478)
• azurerm_cosmosdb_account - add support for value EnableNoSQLFullTextSearch in the capabilities.name property (#​28114)

v4.11.0

Compare Source

NOTES:

• New ephemeral resources azurerm_key_vault_certificate and azurerm_key_vault_secret now support ephemeral values

FEATURES:

• New Ephemeral Resource: azurerm_key_vault_certificate (#​28083)
• New Ephemeral Resource: azurerm_key_vault_secret (#​28083)
• New Resource: azurerm_eventgrid_namespace (#​27682)

ENHANCEMENTS:

• dependencies: update hashicorp/go-azure-sdk to v0.20241118.1115603 (#​28075)
• batch - upgrade api version to 2024-07-01 (#​27982)
• containerregistry - upgrade api version to 2023-11-01-preview (#​27983)
• azurerm_application_gateway - 1.1 is now accepted as a valid rule_set_version in the waf_configuration block (#​28039)
• azurerm_arc_machine - add support for the identity and tags properties (#​27987)
• azurerm_container_app - secret.name now accepts up to 253 characters and . (#​27935)
• azurerm_network_manager - scope_accesses now accepts Routing (#​28033)
• azurerm_network_watcher_flow_log - add support for the target_resource_id property (#​26015)
• azurerm_role_assignment - condition_version will be defaulted to 2.0 when condition has been set (#​27189)
• azurerm_subnet - Informatica.DataManagement/organizations is a valid service_delegation (#​27993)
• azurerm_virtual_network - Informatica.DataManagement/organizations is a valid service_delegation (#​27993)
• azurerm_web_application_firewall_policy - 1.1 is now accepted as a valid version for Microsoft_BotManagerRuleSet rule types (#​28039)

BUG FIXES:

• azurerm_api_management - public_ip_address_id is no longer required when zone has been set (#​27976)
• azurerm_api_management_diagnostic - raise and error when operation_name_format is used with and identity that is not applicationinsights (#​27630)
• azurerm_api_management_api_diagnostic - raise and error when operation_name_format is used with and identity that is not applicationinsights (#​27630)
• azurerm_application_gateway - rewrite_rule_set can be supplied when using Basic sku (#​28011)
• azurerm_container_registry_token_password - correctly mark as gone if container registry token doesn't exist (#​27232)
• azurerm_kusto_cluster - allowed_fqdn and allowed_ip_ranges can now be set to empty lists (#​27529)
• azurerm_linux_function_app_slot - create content settings when using a consumpton plan (#​25412)
• azurerm_virtual_network_gatway - updating ip_configuration now recreates the resource (#​27828)

v4.10.0

Compare Source

BREAKING CHANGES:

• dependencies - update cognitive to 2024-10-01, due to a behavioural change in this version of the API, the primary_access_key and secondary_access_key can not be retrieved if local_authentication_enabled has been set to false. These properties that may have had values previously will now be empty. This has affected the azurerm_ai_services and azurerm_cognitive_account resources as well as the azurerm_cognitive_account data source (#​27851)

FEATURES:

• New Data Source: azurerm_key_vault_managed_hardware_security_module_key (#​27827)
• New Resource: azurerm_netapp_backup_vault (#​27188)
• New Resource: azurerm_netapp_backup_policy (#​27188)

ENHANCEMENTS:

• dependencies: update terraform-plugin-framework to version v1.13.0 (#​27936)
• dependencies: update terraform-plugin-framework-validators to version v0.14.0 (#​27936)
• dependencies: update terraform-plugin-go to version v0.25.0 (#​27936)
• dependencies: update terraform-plugin-mux to version v0.17.0 (#​27936)
• dependencies: update terraform-plugin-sdk/v2 to version v2.35.0 (#​27936)
• Data Source: azurerm_bastion_host - add support for the zones property (#​27909)
• azurerm_application_gateway - support more values for the status_code property (#​27535)
• azurerm_bastion_host - support for the zones property (#​27909)
• azurerm_communication_service - support for usgov region (#​27919)
• azurerm_email_communication_service - support for usgov region added (#​27919)
• azurerm_linux_function_app - support for .NET 9 (#​27879)
• azurerm_linux_function_app_slot - support for .NET 9 (#​27879)
• azurerm_linux_web_app - support for .NET 9 (#​27879)
• azurerm_linux_web_app_slot - support for .NET 9 (#​27879)
• azurerm_windows_web_app - support for .NET 9 (#​27879)
• azurerm_windows_web_app_slot - support for .NET 9 (#​27879)
• azurerm_windows_function_app - support for .NET 9 (#​27879)
• azurerm_windows_function_app_slot - support for .NET 9 (#​27879)

BUG FIXES:

• azurerm_log_analytics_workspace_table - use the subscription from workspace ID (#​27590)
• azurerm_traffic_manager_external_endpoint - the value for priority will be dynamically assigned by the API (#​27966)
• azurerm_traffic_manager_azure_endpoint - the value for priority will be dynamically assigned by the API (#​27966)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.