June 03; 2025$$$Version 2.74.0$$$$$$ACR$$$az acr login: Add refreshToken and username fields to the output after using --expose-token parameter$$$az acr create: Fix logs for domain name label$$$az acr connected-registry: Remove private preview message$$$AKS$$$az aks nodepool add/update/upgrade: Add new parameter --undrainable-node-behavior to specify whether nodes can be cordoned during upgrade$$$az aks create/enable-addons: Remove preview flag for --enable-high-log-scale-mode parameter$$$az aks nodepool add/update/upgrade: Add --max-unavailable to specify he maximum number or percentage of nodes that can be simultaneously unavailable during upgrade$$$App Config$$$Fix #30619: az appconfig feature set: Fix invalid value for --requirement-type$$$Fix #30619: az appconfig kv import: Fix invalid value for --requirement-type$$$App Service$$$az appservice plan create: Update the description of --zone-redundant parameter$$$az webapp config set: Remove number of workers validation$$$ARM$$$az policy: Add breaking change pre-announcement$$$Backup$$$az backup container/item/policy/protection: Add support for ASE backup operations$$$az backup: Add support for HANA Snapshot$$$Compute$$$az vm/vmss create: Add warning log for changing the default value of VM size$$$Core$$$Resolve CVE-2024-13176$$$Resolve CVE-2024-9143$$$Cosmos DB$$$az cosmosdb sql container: Add Full Text Policy support$$$Identity$$$az identity federated-credential create/update: Add support for claims matching expressions$$$Monitor$$$az monitor action-group: Support --incident-receivers; --mi-user-assigned and --mi-system-assigned(#31205)$$$MySQL$$$az mysql flexible-server create: Change default storage redundancy for BC SKU to local redundancy$$$NetAppFiles$$$az netappfiles volume-group create: Add support for Oracle in ANF Volume Groups$$$Network$$$az network vnet-gateway create: Add --enable-high-bandwith-vpn-gateway parameter$$$az network vpn-connection show: Support new properties output with virtual network gateway$$$az network vnet-gateway migration: Support vpn gateway migration feature$$$az network private-endpoint-connection: Add provider Microsoft.FluidRelay/fluidRelayServers$$$az network network-watcher packet-capture: Support for packet capture includes a ring buffer$$$az network private-endpoint-connection: Add provider Microsoft.VideoIndexer/accounts$$$RDBMS$$$az postgres flexible-server create/db: Fix for --database-name validation

May 20; 2025$$$Version 2.73.0$$$$$$ACR$$$az acr connected-registry create/update: Add new parameter --gc-enabled which enables or disables garbage collection on a connected registry$$$az acr connected-registry create/update: Add new parameter --gc-schedule which uses cron expression to set a collection interval$$$az acr create/update: Add a new optional parameter --role-assignment-mode to specify the role assignment mode for new or existing registries. This parameter allows customers to enable or disable Attribute-Based Access Control (ABAC)$$$az acr check-health: Add a new optional parameter --repository to check read; write; and delete permissions for a specific repository$$$az acr task create/update: Add a new optional parameter --source-acr-auth-id to specify the managed identity used for authentication with the source registry$$$az acr build: Add a new optional parameter --source-acr-auth-id to specify the identity used for authentication with the source registry$$$az acr run: Add a new optional parameter --source-acr-auth-id to specify the identity used for authentication with the source registry$$$az acr create: Remove preview flag from --allow-trusted-services$$$AKS$$$[BREAKING CHANGE] az aks create: Change default value of option --node-vm-size to $$$[BREAKING CHANGE] az aks nodepool add: Change default value of option --node-vm-size to $$$az aks create/update: Add support for apiserver vnet integration feature$$$az aks create/approuting: Add default NIC config for app routing$$$Fix #31265: az aks enable-addons: Fix UnboundLocalError when setting specific dataCollectionSettings$$$App Service$$$[BREAKING CHANGE] az appservcie ase create/update/delete: Remove support for ASEv2$$$az webapp list-runtimes: Update API response filter logic$$$az functionapp plan update: Add zone redundant update support for Flex$$$Backup$$$[BREAKING CHANGE] az backup protection enable-for-vm: Support for protecting TVM with standard policy$$$Cloud$$$[BREAKING CHANGE] az cloud register/update: No gallery endpoint returned if use endpoint discovery with --endpoint-resource-manager$$$az cloud register/update: Support data plane endpoints auto discovery with --endpoint-resource-manager$$$Compute$$$[BREAKING CHANGE] az sig image-definition list-community/list-shared: Replace pagination parameters with new parameters --max-items and --next-token$$$[BREAKING CHANGE] az sig image-version list-community/list-shared: Replace pagination parameters with new parameters --max-items and --next-token$$$az vm/vmss create: Fix missing auxiliary tokens$$$az vmss create/update: Add new parameter --enable-automatic-zone-balancing to support setting automatic zone rebalancing policy$$$az vmss create/update: Add new parameter --automatic-zone-balancing-strategy to support setting automatic zone rebalancing policy$$$az vmss create/update: Add new parameter --automatic-zone-balancing-behavior to support setting automatic zone rebalancing policy$$$az vmss create/update: Add new parameter --skuprofile-rank to specify a list of ranks to use with VMSS instance mix SKU profile VM sizes$$$DMS$$$az dms project task create: Add ability to use a lockless option for ensuring data consistency$$$Key Vault$$$az keyvault key get-attestation: Support getting a MHSM keys attestation$$$Monitor$$$az monitor log-analytics workspace failover/failback: Add new commands for supporting activating and deactivating workspace failover$$$NetAppFiles$$$az volume-group create: Parameter --proximity-placement-group is no longer required$$$az netappfiles account create: Add new parameter --federated-client-id for Cross Tennant CMK$$$az netappfiles account create: Add new parameter --nfs-v4-id-domain. Domain for NFSv4 user ID mapping$$$az netappfiles account update: Add new parameter --federated-client-id for Cross Tennant CMK$$$az netappfiles account update: Add new parameter --nfs-v4-id-domain. Domain for NFSv4 user ID mapping$$$az netappfiles usage list: Add new command to list current subscription usages$$$az netappfiles usage sho

May 06; 2025$$$Version 2.72.0$$$$$$ACR$$$Fix #31130: az acr task show: Fix extra version line in encodedTask created by file$$$az acr create/check-name: Add parameter --dnl-scope for domain name label hash$$$AKS$$$az aks update: Make specified version to match current version when turning off autoupgrade$$$az aks nodepool add/update: Add option Ubuntu2204 to --os-sku parameter$$$az aks create: Add --custom-ca-trust-certificates parameter to support custom CA trust feature$$$az aks nodepool add: Add --custom-ca-trust-certificates parameter to support custom CA trust feature$$$az aks nodepool add: Add GPU driver install options --gpu-driver install and --gpu-driver none$$$App Config$$$az appconfig create/update: Add developer sku support$$$az appconfig feature set: Update feature name documentation$$$App Service$$$Fix #20983: az webapp config ssl import: Make web app a non-required parameter$$$az appservice plan create: Add Pv4/Pmv4 ASP support$$$Fix #20209: az webapp create-remote-connection: Add ssh command to output$$$ARM$$$az deployment: Fix issue where Bicep is not found in CI environments$$$Fix #31188: az lock delete: Fix the case sensitivity of --namespace parameter validation$$$ARO$$$az aro update: Ensure that refreshing cluster service principal credentials is successful when the cluster has an invalid or missing subnet in its resource definition$$$Compute$$$[BREAKING CHANGE] az sig image-version: Change the --os-vhd-storage-account parameter mapping to the properties.storageProfile.osDiskImage.source.storageAccountId property$$$[BREAKING CHANGE] az sig image-version: Change the --data-vhds-storage-accounts parameter mapping to the properties.storageProfile.dataDiskImages.source.storageAccountId property$$$az vm create: Add new parameter --zone-placement-policy to support setting vm placement to create a zonal VM$$$az vm create: Add new parameter --include-zones to support setting vm placement to create a zonal VM$$$az vm create: Add new parameter --exclude-zones to support setting vm placement to create a zonal VM$$$az vm create/update: Add new parameter --align-regional-disks-to-vm-zone to support setting regional disks attached to the VM to be converted to zonal$$$az sig image-version create/update: Rename shorter alias for --block-deletion-before-end-of-life parameter$$$az vm create/update: Add new parameters --wire-server-mode and --wire-server-access-control-profile-reference-id to support setting wireserver endpoint settings$$$az vmss create/update: Add new parameters --wire-server-mode and --wire-server-access-control-profile-reference-id to support setting wireserver endpoint settings$$$az vm create/update: Add new parameters --imds-mode and --imds-access-control-profile-reference-id to support setting IMDS endpoint settings$$$az vmss create/update: Add new parameters --imds-mode and --imds-access-control-profile-reference-id to support setting IMDS endpoint settings$$$az vm create/update: Add new parameter --key-incarnation-id to support setting key incarnation id$$$az vmss create/update: Add new parameter --key-incarnation-id to support setting key incarnation id$$$az vm/vmss create/update: Set --security-type to Standard only if explicitly set by end user

April 01; 2025$$$Version 2.71.0$$$ACR$$$az acr create: Fix a bug where creating cache rule without credential set would fail$$$AKS$$$az aks: Fix error message when outbound type validation failed$$$az aks create/update: Update recording rule group create logic for managed prometheus addon$$$az aks create/update: Add --bootstrap-artifact-source parameter to configure artifact source when bootstraping the cluster$$$az aks create/update: Add --bootstrap-container-registry-resource-id parameter to configure container registry resource ID$$$az aks create/update: Add new option none for --outbound-type parameter$$$App Config$$$az appconfig: Fix managed identity auth for --auth-mode login parameter$$$App Service$$$az webapp deploy: Add --enable-kudu-warmup parameter to support warm-up Kudu before making deployment$$$Fix #27724: az webapp config appsettings set: Remove redaction warning message from output$$$Fix #26920: az webapp deployment slot create: Make the created new slot has same VNet integration settings of source slot as Portal behavior$$$Fix #30908: az webapp snapshot restore: Fix the error no resource group found when trying to restore a snapshot backup to a paired region$$$Fix #29512: az webapp config backup update: Fix str object has no attribute name$$$Fix #21721: az webapp config storage-account add: Add validation for non-existent FileShare$$$az functionapp list-flexconsumption-locations: Add --details and --runtime parameters to provide more details$$$ARM$$$Fix #29809: az deployment/stack/bicep: Fix an issue where the commands mistakenly check for the latest Bicep version; even when use_binary_from_path is true and check_version is false$$$Fix #29435: az bicep install/upgrade: Fix an issue where the command downloads the x64 binary instead of the ARM binary on aarch64 machines$$$ARO$$$az aro create: Update VM SKU to align with best practices$$$Backup$$$az backup protection enable-for-vm: Update in warning message while protecting Trusted Launch virtual machines$$$Cloud$$$az cloud register/update: Add upcoming breaking change announcement$$$Compute$$$az sig image-definition list-shared: Mark --marker and --show-next-marker as deprecated and will be removed in the upcoming breaking change window$$$az sig image-version list-shared: Mark --marker and --show-next-marker as deprecated and will be removed in the upcoming breaking change window$$$az sig image-definition list-community: Mark --marker and --show-next-marker as deprecated and will be removed in the upcoming breaking change window$$$az sig image-version list-community: Mark --marker and --show-next-marker as deprecated and will be removed in the upcoming breaking change window$$$az disk config update: Add new command to support updating disk size gb by PATCH method$$$az vm/vmss create/update: Add support for setting security type to Standard$$$Fix #30976: az sig image-version create: Fix missing auxiliary tokens$$$az sig image-version create/update: Add new parameter --block-deletion-before-end-of-life to support blocking deletion if the end of life has not expired$$$az vm list-sizes: Mark the command as deprecated$$$Container app$$$Fix #30828: az containerapp job stop: Fix TypeError when --job-execution-name is not specified$$$Core$$$PREVIEW: Support managed identity authentication with MSAL. Run az config set core.use_msal_managed_identity=true or set environment variable AZURE_CORE_USE_MSAL_MANAGED_IDENTITY=true to enable it$$$Key Vault$$$az keyvault create: Support C SKU family for MHSM creation$$$MySQL$$$[BREAKING CHANGE] az mysql flexible-server create: Change default values for --auto-scale-iops; --version for MySQL$$$Network$$$az network virtual-appliance: Add command get-boot-diagnostic-log to support getting boot diagnostic logs$$$Fix #31003: az network vpn-connection create: Pass auxiliary authorization header for referenced resource IDs$$$az network vnet-gateway create: Add --enable-high-bandwith-vpn-gateway parameter$$$az network vpn-connection show: Support new properties with virtual network

March 04; 2025$$$Version 2.70.0$$$$$$AKS$$$az aks create/az aks nodepool add: Emit error message when using --asg-ids alone without --allowed-host-ports$$$az aks nodepool upgrade: Fix --node-soak-duration cannot be set to 0$$$az aks machine list: Add command to fetch list of machines in an agentpool$$$az aks machine show: Add command to fetch information about a specific machine in an agentpool$$$az aks nodepool delete: Add --ignore-pod-disruption-budget option for ignoring PodDisruptionBudget$$$az aks create: Add --message-of-the-day parameter to support message of the day$$$az aks nodepool add: Add --message-of-the-day parameter to support message of the day$$$App Config$$$az appconfig kv import/export: Fix bug when importing feature flag with percentile allocation property$$$az appconfig: Add support for custom token audience to --auth-mode login parameter$$$App Service$$$az functionapp create: Check if storage account is network restricted$$$az functionapp create: Refactor EOL message$$$Fix #28104: az webapp config storage-account: Remove windows limitation notes$$$Fix #28374: az webapp create: Improve error message for globally unique name for new app create$$$az webapp sitecontainers: Add new commands for linux web app sitecontainers$$$az webapp up: Add --enable-kudu-warmup parameter to support warm-up Kudu before making deployment$$$az webapp deploy: Add --enable-kudu-warmup parameter to support warm-up Kudu before making deployment$$$az webapp deployment source config-zip: Add --enable-kudu-warmup parameter to support warm-up Kudu before making deployment$$$Fix #29493: az webapp create: Update basic-auth parameter description$$$ARM$$$az bicep: Fix installation check for concurrent usages$$$Backup$$$az backup restore restore-disks: Support NoZone as a valid target zone for --target-zone parameter$$$Compute$$$az vm available-set create/update: Add --additional-scheduled-events parameter to support setting scheduled event policy$$$az vm available-set create/update: Add --enable-user-reboot-scheduled-events parameter to support setting scheduled event policy$$$az vm available-set create/update: Add --enable-user-redeploy-scheduled-events parameter to support setting scheduled event policy$$$Container app$$$az containerapp create: Fix to make --registry-username value to be DNS1123 compliant$$$Core$$$Resolve CVE-2024-12797$$$Drop Track 1 SDK authentication$$$aaz: Add cross tenants control for AAZResourceIdArgFormat$$$aaz: Support Any type with full value shorthand syntax allowed$$$Cosmos DB$$$az cosmosdb offline-region: Add new command to support offline region for cosmosdb account$$$IoT$$$az iot hub update: Add --min-tls-version parameter to allow updating min tls version in a cleaner way$$$NetAppFiles$$$az netappfiles account: Add new command change-key-vault to change KeyVault/Managed HSM that is used for encryption of volumes under NetApp account$$$az netappfiles account: Add new command get-key-vault-status to get KeyVault information. Response from this command can be used for transitiontocmk$$$az netappfiles account: Add new command transitiontocmk to transition all volumes in a VNet to a different encryption key source (Microsoft-managed key or Azure Key Vault). Operation fails if targeted volumes share encryption sibling set with volumes from another account$$$az netappfiles volume create/update: Add parameter --cool-access-tiering-policy$$$Network$$$az network nic ip-config create/update: Add --private-ip-address-prefix-length to support setting private ip address prefix length$$$RDBMS$$$az postgres flexible-server index-tuning: Support tuning options operations$$$Service Connector$$$az containerapp connection create redis: Add --system-identity paramter$$$az webapp connection create fabric-sql: Fix interactive mode & allow new parameters --fabric-workspace-uuid and fabric-sql-db-uuid$$$Storage$$$az storage account create: Add new --sku StandardV2_LRS/StandardV2_ZRS/StandardV2_ZRS/StandardV2_ZRS/PremiumV2_LRS/PremiumV2_ZRS for provisioned v2 support$$$az storage accoun

February 11; 2025$$$Version 2.69.0$$$$$$ACR$$$az acr manifest list-metadata: Update help messages for untagged manifests$$$AKS$$$az aks create/update/delete: Add parameters --if-match and --if-none-match to support etag functionality for concurrency$$$App Config$$$az appconfig kv import/export: Support microsoft feature management schema$$$az appconfig kv export: Introduce a new environment variable called AZURE_APPCONFIG_FM_COMPATIBILE when exporting to a file for backward compatibility for users$$$az appconfig feature show/list: Support microsoft feature management schema$$$az appconfig kv restore/show/list: Update datetime validation to accept timezone offset$$$az appconfig revision list: Update datetime validation to accept timezone offset$$$az appconfig export: Update export help message for environment variable$$$App Service$$$az functionapp create: Refactor EOL implementation and sort based on runtime EOL date$$$az functionapp list-flexconsumption-locations: Check if flex region is enabled for subscription$$$az functionapp deployment slot create: Add --https-only parameter for slot creation command$$$az webapp list-runtimes: Remove the JBoss _byol entries from the output for webapps with Linux OS$$$Backup$$$az backup: Add support for new AFS Vault Standard Policies$$$Batch$$$[BREAKING CHANGE] az batch certificate create/list/show/delete: Remove deprecated commands$$$[BREAKING CHANGE] az batch node reimage/remote-desktop: Remove deprecated commands$$$[BREAKING CHANGE] az batch pool create: Remove --application-licenses; --certificate-references ; --os-family and --os-version deprecated parameters$$$[BREAKING CHANGE] az batch pool set/reset : Remove --certificate-references deprecated parameter$$$az batch job create: Add parameters --job-manager-task-application-package-references and --on-all-tasks-complete$$$az batch job disable: Add parameter --json-file$$$az batch job-schedule create: Add parameters --job-manager-task-application-package-references; --job-metadata; and --job-manager-task-environment-settings$$$az batch job-schedule set/reset: Add parameters --job-max-task-retry-count and --job-max-wall-clock-time$$$az batch node reboot: Add parameter --json-file$$$az batch node scheduling disable: Add parameter --json-file$$$az batch pool autoscale evaluate: Add parameter --json-file$$$az batch pool create: Add parameters --start-task-environment-settings and --start-task-max-task-retry-count$$$az batch pool reset: Add parameters --start-task-resource-files and --target-node-communication-mode$$$Compute$$$[BREAKING CHANGE] az sig gallery-application create/update: Output field supportedOsType changed to supportedOSType$$$az vm list-sizes: Remove unused parameter --ids$$$az vmss create/update: Add new paramter --zone-balance to support setting zone balance$$$az vm/vmss create: Install guest attestation extension when security type set to ConfidentialVM$$$az vmss scale: Add new logic to support scaling VMSS in edge zone$$$az vmss create: Add --encryption-identity parameter to use managed identity for Azure disk encryption$$$az vmss encryption enable: Add --encryption-identity parameter to update or set encryption identity for Azure disk encryption$$$Container app$$$Fix #28047: az containerapp compose create: Upgrade pycomposefile version to split environment variables on the first equal sign instead of every equal sign$$$DevTest Labs$$$az lab vm: Add hibernate command group$$$Key Vault$$$az keyvault update/update-hsm: Fix --bypass overriding by default when specifying --default-action Deny$$$Network$$$az network lb create: Refine --frontend-ip-zone to support multiple zones$$$az network private-endpoint-connnection: Add Microsoft.HealthDataAiservices/deidservices for private endpoint connections$$$az network routeserver create/update: Add --auto-scale-config$$$az network virtual-appliance reimage: Allow reimage of virtual machines associated with a network virtual appliance$$$Profile$$$az login: Passing the managed identity ID with --username is deprecated and will be remo

January 14; 2025$$$Version 2.68.0$$$$$$ACR$$$az acr agentpool: Fix delete polling$$$az acr create: Add validation for registry name to support domain name label$$$AKS$$$az aks command invoke: Add progress spinner$$$az aks create/update: Add --enable-acns parameter to support enabling advanced networking functionalities on a cluster$$$az aks create/update: Add --disable-acns-observability parameter to disable advanced networking observability features when enabling advanced networking features with --enable-acns$$$az aks create/update: Add --disable-acns-security parameter to disable advanced networking security features when enabling advanced networking features with --enable-acns$$$az aks update: Add --disable-acns parameter to support disabling advanced networking functionalities on a cluster$$$az aks update: Add --ip-families to support updating cluster network$$$az aks create/update: Add --nrg-lockdown-restriction-level parameter to support specifying restriction level on the managed node resource group$$$App Config$$$az appconfig kv import: Fix import mode all bug$$$Compute$$$[BREAKING CHANGE] az disk: Refine output fields to align with backend service$$$[BREAKING CHANGE] az snapshot: Refine output fields to align with backend service$$$Fix #30009: az vm install-patches: Fix errors due to typos in install_vm_patches function$$$az vm/vmss create: Fix help message for --public-ip-address parameter$$$Fix #30565: az vm create: Fix creating VM with --patch-mode parameter$$$Fix #30564: az vm create: Fix creating VM with --enable-auto-update parameter$$$az vm create: Add --encryption-identity parameter to use that managed identity for Azure disk encryption$$$az vm encryption enable: Add --encryption-identity parameter to update or set encryption identity for Azure disk encryption$$$az vmss create/update: Add new parameter --security-posture-reference-is-overridable to support setting security posture reference overridable$$$az vmss create/update: Change existing parameter --security-posture-reference-exclude-extensions to receive string list$$$az vm create/update: Add new parameter --additional-scheduled-events to support setting scheduled event policy$$$az vm create/update: Add new parameter --enable-user-reboot-scheduled-events to support setting scheduled event policy$$$az vm create/update: Add new parameter --enable-user-redeploy-scheduled-events to support setting scheduled event policy$$$Container$$$az container exec: Fix exception when stdin is not a tty$$$Container app$$$az containerapp exec: Fix ResourceNotFound error$$$az containerapp ingress enable: Fix issue about labels being deleted$$$Fix #29238: az containerapp secret set: Add description about identityref for parameter --secrets$$$Cosmos DB$$$az cosmosdb create/update: Add --enable-prpp-autoscale to enable/disable burst capacity feature$$$Key Vault$$$az keyvault key sign/verify: Fix --digest to accept base64 encoded string$$$Microsoft Entra ID$$$az ad app create/update: Add --requested-access-token-version argument$$$MySQL$$$az mysql flexible-server create/restore/replica create/geo restore: Add --storage-redundancy parameter to support HA storage with zone redundancy$$$Network$$$az network vnet-gateway create/update: Add parameter --resiliency-model$$$az network vnet create/update: Add parameter --ipam-pool-prefix-allocations$$$Fix #30535: az network lb address-pool address add: Address level may not have virtual network property$$$Profile$$$Drop support for old-style managed identity account created by Azure CLI <= 2.0.50. If you upgrade from one of these versions; please run az login --identity again.$$$RDBMS$$$az postgres flexible-server create: Create elastic cluster by setting --cluster-option to ElasticCluster$$$az postgres flexible-server list: Add --show-cluster argument to list elastic clusters$$$az postgres flexible-server fabric-mirroring/identity: Support system assigned managed identity and fabric mirroring of databases$$$az postgres flexible-server update: Add --node-count argument to scale up elasti

October 01; 2024$$$Version 2.65.0$$$$$$ACR$$$Fix #21900: az acr task identity remove: Fix incorrect operation_group setting$$$az acr credential-set: Improve help message$$$AD$$$az ad app create/update: Add --service-management-reference argument$$$AKS$$$az aks nodepool delete-machines: Add support to delete specific machines in an agent pool$$$App Config$$$az appconfig: Add premium SKU support$$$App Service$$$az functionapp config set: Map parameters explicitly for the internal update_site_configs function call$$$Compute$$$az vm/vmss create: Add --ssh-key-type parameter to support generating Ed25519 SSH keys$$$az vm image list: Expose ImageDeprecationStatus property in output$$$Container app$$$Fix #29849: az containerapp job stop: Fix stop execution response$$$Fix #29166: az containerapp compose create: Support image with tag and support get ACR from image$$$Cosmos DB$$$az cosmosdb restore: Add --disable-ttl to support for Restore with Time-To-Live Disabled$$$DataLake$$$az dla: Deprecate datalake analytics$$$HDInsight$$$az hdinsight update: Add parameter --assign-identity-type to allow to update to SystemAssigned identity.$$$Monitor$$$az monitor action-group create: Adjust formatting of --actions help message$$$az monitor action-group update: Adjust formatting of --add-actions help message$$$az monitor action-group notification create: Adjust formatting of --add-actions help message$$$MySQL$$$az mysql flexible-server create/update: Add --accelerated-logs to support configuring accelerated logs for Business Critical tier$$$NetAppFiles$$$az netappfiles volume create: Fix subnet id as resource id$$$Network$$$az network vnet peering: Refine command interface of subnet peering$$$Packaging$$$Release Docker image based on Azure Linux 3.0$$$Include jq in Azure Linux docker image$$$Drop Debian 10 support$$$Use Azure Linux 3.0 (mcr.microsoft.com/azurelinux/base/core:3.0) as the base image for docker image tag latest and 2.65.0$$$Profile$$$az login: Fall back to device code flow in GitHub Codespaces$$$RDBMS$$$az postgres flexible-server update: Support case-insensitive input for --tier; --performance-tier; --sku; and --maintenance-window$$$az postgres flexible-server migration create: Add AWS_AURORA as a migration source type for PostgreSql$$$SQL$$$az sql elastic-pool create: Set min_capacity to None for non-serverless SKUs$$$az sql mi create/update: Add gpv2 parameter and iops parameter

September 03; 2024$$$Version 2.64.0$$$$$$ACR$$$az acr helm: Improve deprecation message$$$AKS$$$az aks nodepool update: Add --enable/disable-fips-image flags for GA mutable fips$$$az aks create/update: Support UserAssigned Managed Identity for grafana linking in managed prometheus$$$az aks create/update: Update the VM SKU regex validation to include larger set of VMs for Azure Container Storage$$$App Service$$$az staticwebapp create/update: Add Dedicated as supported SKU$$$az webapp config set: Add MinTlsCipherSuite support$$$az webapp config access-restriction add/remove: Allow skipping service tag validation$$$ARM$$$az ts create: Fix incorrect handling of whitespace in string values$$$ARO$$$az aro create: Add feature for adding Multiple Public IPs on cluster load balancer$$$az aro update: Add feature for adding/removing Multiple Public IPs on cluster load balancer$$$Compute$$$az vm update: Add support of Gen1 VM to trusted launch upgrade$$$az capacity reservation: GA command group$$$Container app$$$Fix #28998: az containerapp env workload-profile add/update: Fix NoneType object is not iterable error when environment doesnt enable workload profile$$$az containerapp create/up: Make --target-port optional$$$az containerapp env create: Deprecate unused argument --docker-bridge-cidr$$$az containerapp job stop: Deprecate option to stop list of given job executions$$$Fix #29711: az containerapp logs show: Fix JSON escaping by default or with --format json$$$HDInsight$$$az hdinsight create: Support setting IP tags when creating HDInsight cluster$$$az hdinsight update: Support updating the managed identity of the cluster$$$az hdinsight azure-monitor-agent show: Support getting the managed identity of the cluster$$$az hdinsight azure-monitor-agent enable: Enable the Azure Monitor Agent logs integration on an HDInsight cluster$$$az hdinsight azure-monitor-agent disable: Disable the Azure Monitor Agent logs integration on an HDInsight cluster$$$MySQL$$$az mysql flexible-server maintenance: New command group for managing maintenance of MySQL flexible server$$$az mysql flexible-server update: Remove storage passing for server update$$$NetAppFiles$$$az netappfiles volume create/update: Update max for --usage-threshold$$$Network$$$Fix #29565: az network nat gateway create: Add --tags parameter$$$Packaging$$$Support Python 3.12$$$Release Azure Linux 3 RPM package$$$[BREAKING CHANGE] Use CBL-Mariner 2.0 (mcr.microsoft.com/cbl-mariner/base/core:2.0) as the base image for docker image tag latest and 2.64.0$$$Redis$$$az redis create/update: Add --disable-access-keys to support disabling auth through access keys$$$SQL$$$az sql mi create/update: Add --authentication-metadata to support auth metadata configuration$$$Storage$$$az storage account create/update: Support account cold-tier$$$az storage copy/remove: Add --auth-mode login support$$$az storage share delete: Add include-leased for --delete-snapshots

August 06; 2024$$$Version 2.63.0$$$$$$ACR$$$az acr login: Support optional resource group argument to skip subscription resource scan$$$AKS$$$az aks create: Not set the --network-plugin based on the default from the Python SDK$$$az aks create/update: Support in place param updates for managed Prometheus$$$az aks create/update: Add validations for PremiumV2 disk$$$az aks upgrade: Support tier switch with AKS upgrade$$$az aks create/update: Add --network-policy none option to command$$$az aks create: Remove unsupported scenario command in help message$$$App Config$$$az appconfig import/export/restore: Add correlation request id to bulk operations$$$App Service$$$az webapp list-runtimes: Add parameter --show-runtime-details to show detailed runtime stacks and update the format of java related stacks listed$$$az webapp create: Add parameter --acr-identity to allow users to choose user assigned identity for ACR image pull$$$az webapp config set: Add parameter --acr-use-identity and --acr-identity to allow users update ACR image pull related configs$$$ARM$$$az stack group/sub/mg create: Minor improvements to the confirmation message when updating an existing stack$$$CDN$$$Fix #28717: az afd secret: Change the way to access parameter$$$az cdn portal-migration: Add command group for classic CDN profile migration$$$Compute$$$az sig create/update: Hide --soft-delete parameter in help messages$$$Fix #29006: az ssh: Fix the Permissions 0644 for ... are too open error$$$az vmss update: Add new parameter --enable-auto-os-upgrade to support updating automatic OS upgrade policy argument$$$az vmss update: Add new parameter --upgrade-policy-mode to support updating upgrade policy mode$$$Container app$$$Fix #26688: az containerapp up: Fix logic about updating an existing containerapp$$$az containerapp job stop: Return custom message for stop job execution$$$Fix #29330: az containerapp auth update: Fix split logic for --set$$$Core$$$Resolve CVE-2024-39689$$$Resolve CVE-2024-6345$$$Support az config set extension.dynamic_install_allow_preview for extension dynamic installation configuration$$$az logout: Remove service principal access tokens from token cache$$$Cosmos DB$$$az cosmosdb delete: Support --no-wait$$$MySQL$$$az mysql flexible-server import stop-replication: Stop replication between source single server and target flexible server$$$NetAppFiles$$$az netappfiles account create: Change --key-vault-resource-id to be optional$$$Network$$$az network custom-ip prefix create: Add parameter --is-parent$$$az network network-watcher connection-monitor: Support to create connection monitor v2$$$az network vnet peering: Support virtual network subnet peering$$$Packaging$$$Drop Alpine Docker image$$$RDBMS$$$[BREAKING CHANGE] az postgres flexible-server create: Update default value of PG version to be 16$$$Fix #27422: az postgres flexible-server create: Bug fix for using existing subnet while creating pg flex server$$$az postgres flexible-server restore: Bug fix when using resource id as value for source-server argument$$$Role$$$az role assignment list: Add warning for classic administrators retirement$$$Service Connector$$$az containerapp connection create containerapp: Support ACA2ACA connection$$$SQL$$$az sql midb move/copy: Add destination subscription Id for managed database move/copy$$$az sql mi create: Add --dns-zone-partner optional parameter$$$Storage$$$az storage fs directory upload/download: Add back --auth-mode login as AzCopy supports Oauth now$$$az storage blob sync: Add back --auth-mode login as AzCopy supports Oauth now$$$Synapse$$$az synapse spark job submit: Add optional --python-files argument to support job submission

July 09; 2024$$$Version 2.62.0$$$$$$ACR$$$az acr build/task: Highlight the difference between arguments in the description$$$AKS$$$az aks create/update: Update AMW resource.location to only accept alphanumeric characters$$$az aks create/update: Add Azure Managed Grafana support for managed prometheus addon in usnat$$$az aks create/update: Ephemeral disk additional support for Azure Container Storage$$$az aks create/update: Add and fix existing validations for ephemeral disk support for Azure Container Storage$$$App Config$$$az appconfig: Update help message for App Configuration store$$$az appconfig kv import: Update the help message for ignore-match$$$App Service$$$az webapp deploy: Disable deploymentstatus API for deployments to app slots$$$az webapp deployment source config-zip: Disable deploymentstatus API for deployments to app slots$$$Fix #29041: az webapp config access-restriction add: Fix edge case validating service tags$$$az functionapp create: Avoid throwing exception when endOfLifeDate not passed from stacks API$$$ARM$$$az stack mg create: Validate MG stacks automatically before creation$$$az bicep restore: Fix typos in help messages$$$Backup$$$az backup restore restore-disks/restore-azurewl/restore-azurefiles/restore-azurefileshare: Add --tenant-id for cross-tenant MUA protection; otherwise allows restore when protected by a resource guard$$$az backup vault encryption update: Add support for MUA for CMK operations$$$CDN$$$Fix #28721: az afd origin-group create: Add parameter to support session affinity state$$$Fix #28824: az cdn profile: Add default location$$$Fix #28733: az cdn endpoint update: Add support to update an existing endpoint$$$Compute$$$az vmss update: Add new parameter --zones to support setting vmss zonal expansion$$$az vm install-patches: Add new parameter --max-patch-publish-date to support setting max patch publish date$$$az vmss reimage: Add new parameter --force-update-os-disk-for-ephemeral to support updating the base OS disk$$$az vmss create/update: Add new parameter --scheduled-event-additional-publishing-target-event-grid-and-resource-graph to support setting scheduled event policy$$$az vmss create/update: Add new parameter --enable-user-reboot-scheduled-events to support setting policy for rebooting scheduled event$$$az vmss create/update: Add new parameter --enable-user-redeploy-scheduled-events to support setting policy for redeploying scheduled event$$$az vmss update: Add an option Standard to --security-type parameter$$$az vmss create: Support set upgrade policy mode to automatic during flexible VMSS creation$$$az sig image-definition create: Fix default value of security type$$$Container app$$$az containerapp env create/update: Support peer-to-peer traffic encryption with --enable-peer-to-peer-encryption$$$az containerapp job update: Fix poll logic and --no-wait$$$az containerapp show-custom-domain-verification-id: Show verification id used for binding custom domain$$$az containerapp env update: Fix logs configuration about removing destination with --logs-destination none$$$az containerapp list-usages: Support list-usages in subscription$$$Fix #28983: az containerapp job registry: Support commands for modifying the jobs registries$$$az containerapp auth: Support Token Store with --token-store; --sas-url-secret; --sas-url-secret-name; --yes$$$Fix #29128: az containerapp env certificate: Support managed certificate$$$Fix #29172: az containerapp secret set: Remove the limit of length for secret name$$$Core$$$Fix #28997: Fix error User cancelled the Accounts Control Operation when logging in with WAM as Administrator$$$Resolve CVE-2024-37891$$$Resolve CVE-2024-35195$$$aaz: Add argument completer support$$$Cosmos DB$$$az service create: Add --gateway-type to support multiple dedicated gateway types$$$MySQL$$$az mysql flexible-server update: Support replica resource group different with primary server$$$az mysql flexible-server detach-vnet: New command to support converting a vnet azure mysql server to a non-vnet server$$$az mysql flexible-

May 21; 2024$$$Version 2.61.0$$$$$$AKS$$$[BREAKING CHANGE] az aks create: Specifying --enable-managed-identity and --service-principal/--client-secret at the same time will cause a MutuallyExclusiveArgumentError$$$[BREAKING CHANGE] az aks create: Change the default value of option --enable-managed-identity from True to False$$$az aks mesh upgrade rollback/complete: Add --yes parameter to support not prompting the users to confirm the operation$$$az aks create/update: Add SecurityPatch option to --node-os-upgrade-channel parameter$$$az aks create/update: Add new parameter --enable-cost-analysis to enable exporting Kubernetes namespace and deployment details to the Cost Analysis views$$$az aks create: Backfill the value of --enable-managed-identity to True when options --service-principal and --client-secret are not specified at the same time$$$az aks nodepool update: Add option --os-sku to support updating os sku in place$$$az aks create: Add --ampls-resource-id and --enable-high-log-scale-mode optional parameters for Monitoring Addon$$$az aks enable-addons: Add --ampls-resource-id and --enable-high-log-scale-mode optional parameters$$$App Service$$$[BREAKING CHANGE] az webapp deploy: Use deployment status API for deployment output for Linux Web Apps$$$[BREAKING CHANGE] az webapp up: Use deployment status API for deployment output for Linux Web Apps$$$[BREAKING CHANGE] az webapp deployment source config-zip: Use deployment status API for deployment output for Linux Web Apps$$$az functionapp scale config always-ready: Set alwaysReady property to empty array if it is null$$$az functionapp: Update messaging for flex function apps$$$az functionapp deployment source config-zip: Allow users with no Microsoft.Web/serverFarm read privileges to deploy function apps$$$az webapp list: Fix the bug --show-details fails while resource group name is not specified$$$az webapp list-runtimes/create/up: Add Java 21 support$$$az functionapp create: Use stacks API netFrameworkVersion value instead of the default value from the Python SDK$$$az functionapp create: The linuxFxVersion for dotnet-isolated linux consumption apps will no longer be left empty$$$az functionapp: Not block execution of command when runtime cannot be detected; and omit showing warning for runtime when not applicable (e.g. centauri apps; apps running a docker image)$$$az appservice plan create/update: Add IsolatedV2 memory intensive SKU support$$$az functionapp create: If customers do not provide an image when creating a Centauri function app; we use the updated default Centauri image$$$$$$For more details refer - https://learn.microsoft.com/en-us/cli/azure/release-notes-azure-cli#may-21-2024

April 30; 2024$$$Version 2.60.0$$$$$$ACR$$$[BREAKING CHANGE] az acr connected-registry create: Mode default value change from ReadWrite to ReadOnly$$$az acr connected-registry create: If data-endpoint disabled ask for confirmation to enable it instead of throwing an error$$$AKS$$$az aks create/update: Prompt warning during disablement about CR deletion$$$az aks create/update: Udpate RP registration code to work on azure monitor subscription$$$az aks create/update: Update to add default region for workspace creation in air gapped cloud$$$az aks nodepool add: Add parameter --disable-windows-outbound-nat to add a Windows agent pool which the Windows OutboundNAT is disabled$$$App Service$$$az webapp config container set: Remove docker prefix and rename container related parameters$$$az webapp create and az webapp deployment slot create: Rename --docker-registry-server-user and --docker-registry-server-password to --container-registry-user and --container-registry-password$$$az webapp create and az webapp deployment slot create: Add parameters --container-image-name and container-registry-url to deprecate --deployment-container-image-name$$$az webapp create and az logicapp create: Update help message$$$az webapp config set: Add new parameter --runtime to allow users to update their stack by using single parameter$$$az functionapp create: Remove unnecessary app settings for flex function apps$$$Fix #28588: az webapp config access-restriction add: Check for null before getting values$$$az webapp config access-restriction set: Add new parameter --default-action to configure default action for main site$$$az webapp config access-restriction set: Add new parameter --scm-default-action to configure default action for scm site$$$az webapp list: Add parameter --show-details to include detailed site configuration of listed webapps in output$$$az functionapp create: Will validate that the provided runtime is supported by flex when creating a flex function app$$$az functionapp list-flexconsumption-runtimes: Add support for this new command so that it provides the list of supported flex runtimes when provided the --location and --runtime$$$ARM$$$az bicep install: Support additional process architectures with Bicep CLI$$$az deployment: Return better message on incorrect bicepparam file path$$$az bicep format: Replace --newline with --newline-kind$$$az bicep publish: Replace --documentationUri with --documentation-uri$$$Backup$$$az backup vault update: Take --tenant-id as input for resolving cross-tenant resource guard scenarios. Vault Immutability feature also has resource guard protection now; and support for the same has been added.$$$az backup protection disable: Take --tenant-id as input for resolving cross-tenant resource guard scenarios. Stop protection feature also has resource guard protection now; and support for the same has been added.$$$Batch$$$az batch pool create: Add --upgrade-policy-mode argument to support automatic OS upgrade$$$az batch pool create: Add --enable-auto-os-upgrade argument to enable automatic OS upgrade$$$az batch pool create: Add --disable-auto-rollback argument to disable OS image rollback feature$$$az batch pool create: Add --defer-os-rolling-upgrade argument to defer OS upgrades on the TVMs if they are running tasks$$$az batch pool create: Add --use-rolling-upgrade-policy argument to support OS rolling upgrade policy$$$az batch pool create: Add --enable-cross-zone-upgrade argument to support cross zone OS upgrade$$$az batch pool create: Add --max-batch-instance-percent argument to set the maximum percent of total VMs that will be upgraded in one batch$$$az batch pool create: Add --max-unhealthy-instance-percent argument to set the maximum percentage of the total VMs can be simultaneously unhealthy$$$az batch pool create: Add --max-unhealthy-upgraded-instance-percent argument to set the maximum percentage of upgraded VMs that can be found to be in an unhealthy state$$$az batch pool create: Add --pause-time-between-batches argument to set the wait tim

April 02; 2024$$$Version 2.59.0$$$$$$ACR$$$Fix #14768: az acr login: Add environment variable for docker command$$$ACS$$$az aks create: Add flag --enable-app-routing to enable app routing$$$az aks approuting: Add command group to handle enable/disable/update of the app routing addon$$$az aks approuting zone: Add command group to handle add/delete/update/list actions of DNS zone resources associated to the approuting addon$$$az aks create/update: Introduce changes for Azure container storage in ACS CLI$$$AD$$$az ad: Rename Azure Active Directory to Microsoft Entra ID$$$AKS$$$az aks create: Add optional parameter --revision to set revision for the Azure Service Mesh addon while creating AKS cluster$$$az aks mesh get-upgrades: Fix command failure with a traceback if ASM addon is disabled$$$az aks create/update: Enable mooncake support for managed prometheus addon$$$az aks create/update: Block Azure Managed Grafana for managed prometheus addon in air gapped cloud$$$az aks create: Correct use of comma-separated in help$$$App Config$$$az appconfig feature filter update: GA command$$$az appconfig kv export: GA parameter --export-as-reference$$$App Service$$$az functionapp create: Add support for Node 20 for Flex function apps$$$az functionapp create: Make Node 20 the default for node flex function apps and Python 3.11 the default for python flex function apps$$$az functionapp create: Add support for SystemAssignedIdentity and UserAssignedIdentity as the deployment storage authentication type$$$az webapp update: Add new parameter --elastic-web-app-scale-limit and scaling parameter options$$$az appservice plan update: Add new parameter --elastic-web-app-scale-limit and scaling parameter options$$$az webapp deployment source config-zip: Mark this command as deprecated; recommend using the az webapp deploy command instead of it$$$ARM$$$az stack group create: Deprecate the --delete-resources; --delete-resource-groups and --delete-all options and redirect to the new --action-on-unmanage argument$$$az stack group delete: Deprecate the --delete-resources; --delete-resource-groups and --delete-all options and redirect to the new --action-on-unmanage argument$$$az stack sub create: Deprecate the --delete-resources; --delete-resource-groups and --delete-all options and redirect to the new --action-on-unmanage argument$$$az stack sub delete: Deprecate the --delete-resources; --delete-resource-groups and --delete-all options and redirect to the new --action-on-unmanage argument$$$az stack mg create: Deprecate the --delete-resources; --delete-resource-groups and --delete-all options and redirect to the new --action-on-unmanage argument$$$az stack mg delete: Deprecate the --delete-resources; --delete-resource-groups and --delete-all options and redirect to the new --action-on-unmanage argument$$$az deployment: Treat nullable parameters as non-required for Bicep deployment$$$ARO$$$az aro create/validate: Fix bug in permissions validation that was preventing cluster creation in cases where the invoking user had the necessary permissions$$$CDN$$$az afd profile: Add parameter --identity$$$Compute$$$az snapshot grant-access: Add parameter --file-format to support specifying file format when making request for SAS on a VHDX file format snapshot$$$az vmss create: Add --enable-auto-os-upgrade parameter to support automatic OS Upgrade while creating VMSS$$$az sig image-definition create: Add warning message for Hyper-V generation and Security Type$$$az vmss create/update: Add parameters to specify the security posture to be used for all virtual machines in the scale set$$$az capacity reservation group create/update: Add new parameter --sharing-profile to support sharing capacity reservation group across subscriptions$$$az snapshot create: Add parameter --bandwidth-copy-speed to allow a snapshot to be copied at a quicker speed$$$DataBoxEdge$$$az databoxedge device: Add command group share to support managing device share$$$az databoxedge device: Add command group user to support managing device user$$$

March 05; 2024$$$Version 2.58.0$$$$$$ACR$$$az acr: Update registry and webhook example names to be lowercase$$$az acr create/update: Add new argument --allow-metadata-search to enable the metadata-search feature for the registry$$$AKS$$$Add monitoring addon to support default workspace in AGC$$$az aks get-versions: Show extra column on supportPlan$$$az aks create/update: Update region map for default region creation with new Azure Monitor Workspace regions$$$az aks update: Zero can be set to outbound-ports;outbound-ip-count in loadbalancer profile and outbound-ip-count in natgateway profile in AKS$$$API Management$$$az apim api export: Add command to export an API Management API$$$App Service$$$az webapp up/create/update: Add new parameter --basic-auth to allow users to enable and disable basic auth$$$ARM$$$Fix #27855: az bicep generate-params: Bicep install messages sent to stdout$$$Backup$$$[BREAKING CHANGE] az backup item set-policy: Add warning prompt for migration from Standard to Enhanced Policy$$$Batch$$$az batch pool create: Add new parameter --resource-tags to support specifying resource tags for the pool. Any resource created for the pool will then also be tagged by the same resource tags$$$az batch pool create: Add new parameters --security-type; --encryption-at-host; --secure-boot-enabled; and --v-tpm-enabled to support Trusted Launch Security Type for VMs/VMSS deployments$$$az batch pool create: Add new parameters --caching; --disk-size-gb; --write-accelerator-enabled; and --storage-account-type to support Batch Node Agent temp disk-less SKUs$$$CDN$$$Fix #28240: az afd rule create: Cannot create without condition$$$Fix #28223: az afd route create: Cannot create without --content-types-to-compress$$$Fix #27744: az afd origin-group: Add parameter --enable-health-probe$$$Compute$$$az vmss nic: Update help messages to guild users to specific commands for Flexible VMSS$$$az vm host redeploy: Add command to redeploy the dedicated host$$$Fix #28397: az vm create: Fix creating VM with --security-type Standard$$$az vmss application set: Fix updates to the purchase plan are not supported when updating VMSS$$$az vmss update-domain-walk: Add new command to support updating vm in a service fabric vmss$$$Containerapp$$$az containerapp revision copy: Fix --from-revision bug for inheriting a specific revision contains scale rules$$$az containerapp update: Fix TypeError: Argument of type NoneType is not iterable$$$Fix #28226: az containerapp job update: Update existing scale rules if --scale-rule-name is passed$$$Core$$$[BREAKING CHANGE] az login: Replace allow_broker with enable_broker_on_windows (#27726)$$$Cosmos DB$$$az cosmosdb sql database/container restore: Fix support for restore of deleted database resource in the same SQL account$$$az cosmosdb mongodb database/collection restore: Fix support for restore of deleted database resource in the same MongoDB account$$$az cosmosdb gremlin database/graph restore: Fix support for restore of deleted database resource in the same gremlin account$$$az cosmosdb table restore: Fix support for restore of deleted table resource in the same account$$$MySQL$$$az mysql flexible-server import create: Change the default progress message from starting to running$$$Network$$$az network virtual-appliance connection: Add show and list commands for NVA connection$$$az network vnet-gateway: Add parameters --allow-remote-vnet-traffic and --allow-vwan-traffic$$$az network express-route gateway: Add parameter --allow-non-vwan-traffic$$$RDBMS$$$Fix #27713: az postgres flexible-server list-skus -o table: Fix table output from list-skus command$$$Security$$$az security api-collection: Manage Azure API Management API connections to Microsoft Defender for APIs$$$az security security-connector: Manage cloud security posture management (CSPM) and cloud workload protection (CWP) across multicloud resources$$$SQL VM$$$Fix #27300: az sql vm group create: --cluster-subnet-type should only be passed into WsfcDomainProfile$$$Storage$$$Fix #28356: az storage account or-

January 09; 2024$$$Version 2.56.0$$$$$$AKS$$$az aks create/update: Add new parameter --load-balancer-backend-pool-type to define the Load Balancer backend pool type of managed inbound backend pool$$$az aks create: Add parameter --node-public-ip-tags to specify the ipTags of the node public IPs$$$az aks nodepool: Add parameter --node-public-ip-tags to specify the ipTags of the node public IPs$$$az aks create and az aks nodepool add: Add crg-id option to create nodepool with Capacity Reservation Group$$$az aks stop: Add warning when private link cluster is stopped$$$az aks trustedaccess role: Add new command group to manage trusted access roles$$$az aks trustedaccess rolebinding: Add new command group to manage trusted access role bindings$$$az aks trustedaccess rolebinding list: Add new command to list all the trusted access role bindings$$$az aks trustedaccess rolebinding show: Add new command to get the specific trusted access role binding according to binding name$$$az aks trustedaccess rolebinding create: Add new command to create a new trusted access role binding$$$az aks trustedaccess rolebinding update: Add new command to update an existing trusted access role binding$$$az aks trustedaccess rolebinding delete: Add new command to delete a trusted access role binding according to name$$$az aks update: Add parameter --network-plugin to update the network plugin of the AKS cluster$$$App Config$$$az appconfig feature set: Add requirement type to feature command$$$App Service$$$az functionapp create: Add DAPR support for Centauri apps$$$az functionapp create: Remove workarounds for Centauri$$$az webapp deploy: Add --track-status arg to use deploymentstatus API$$$az functionapp create: Add workload profile support for Centauri apps$$$ARM$$$az bicep publish: Add optional parameter --with-source to publish source code with the module (experimental)$$$az lock delete: Fix the case sensitive comparison issue for resource group name$$$Compute$$$az vmss create: Change --orchestration-mode to support only uniform for old profile$$$az vm/vmss create/update: Add new parameters --enable-proxy-agent and --proxy-agent-mode to support azure metadata security protocol$$$az vm/vmss create: Add new option NonPersistedTPM for parameter --os-disk-security-encryption-type to support creating Intel TDX based Confidential VM$$$Containerapp$$$az containerapp job update: Fix bug for minExecutions in --yaml is not set when the value is 0$$$az containerapp hostname bind: Fix an issue about parsing the environments resource group when the --environment is a resource id$$$Cosmos DB$$$az cosmosdb sql database restore: Add support for restore of deleted database resource in the same SQL account$$$az cosmosdb sql container restore: Add support for restore of deleted container resource in the same SQL account$$$az cosmosdb mongodb database restore: Add support for restore of deleted database resource in the same MongoDB account$$$az cosmosdb mongodb collection restore: Add support for restore of deleted collection resource in the same MongoDB account$$$az cosmosdb gremlin database restore: Add support for restore of deleted database resource in the same gremlin account$$$az cosmosdb gremlin graph restore: Add support for restore of deleted graph resource in the same gremlin account$$$az cosmosdb table restore: Add support for restore of deleted table resource in the same account$$$Eventhub$$$az eventhubs georecovery-alias create: Name parameter is required$$$Extension$$$az extension: Enable extension semantic versioning and join experimental into preview$$$az extension add/update: Add --allow-preview to distinguish stable-only installation with preview-included installation$$$Key Vault$$$az keyvault create/update-hsm: GA --mi-user-assigned$$$az keyvault backup/restore start: GA --use-managed-identity$$$Monitor$$$az monitor log-analytics workspace: Add list-link-target and list-available-service-tier$$$Network$$$az network application-gateway waf-config list-dynamic-rule-sets: Support to get the WAF dynamic ma

December 05; 2023$$$Version 2.55.0$$$$$$ACR$$$az acr login: Allow registry names with hyphen$$$Fix #27487: az acr check-health: Fix DOCKER_PULL_ERROR when acr check-health for Mac OS$$$AKS$$$az aks update: Update outbound ip description and remove limitation$$$az aks create: Add arguments --asg-ids and --allowed-host-ports$$$az aks nodepool add/update: Add arguments --asg-ids and --allowed-host-ports$$$App Service$$$Fix #27189: az webapp log tail: Catch exception when scm connection is lost$$$Billing$$$az billing period list: Fix --top does not work as expected$$$az billing invoice download: Fix command does not work$$$az billing invoice list: Fix --period-end-date and --period-start-date help message error$$$Compute$$$az disk create: Add new parameter --optimized-for-frequent-attach to improve reliability and performance of data disks that are frequently attached$$$az disk/snapshot create: Add new parameter --elastic-san-resource-id to support creating through the ARM id of elastic san volume snapshot$$$Containerapp$$$az containerapp ingress cors enable: Only update arguments --allow-headers; --allow-credentials; --allow-methods; --expose-methods; --max-age when the value is not None$$$az containerapp: Change the container-app name and container-app job name in the example to legal names$$$Key Vault$$$az keyvault backup start: Add status in output$$$Monitor$$$az monitor activity-log alert: Upgrade api-version to 2020-10-01 to include any-of query condition$$$az monitor activity-log alert: Expose parameter all-of to enable user modifying query condition specifically$$$Network$$$az network private-endpoint-connection: Add provider Microsoft.DBforPostgreSQL/flexibleServers$$$az network public-ip prefix: Add parameter --tier$$$RDBMS$$$az postgres flexible-server replica create: Add support for parameters like --tier; --sku-name; --storage-size during replica creation$$$az postgres flexible-server update: Add support for custom IOPS update for flexible server using --performance-tier$$$az postgres flexible-server advanced-threat-protection-setting show: Show advanced threat protection setting$$$az postgres flexible-server advanced-threat-protection-setting update: Update advanced threat protection setting using --state as Enabled/Disabled$$$Service Connector$$$az containerapp connection create: Enable Key Vault Reference in Container Apps$$$SQL$$$az instance-pool create/update: Add optional parameter --maintenance-configuration-id for SQL Instance Pool resource$$$az mi create/update: Add optional parameter --instance-pool-name for SQL Managed Server resource$$$Storage$$$az storage blob upload: Increase max_block_size for append/block blobs of size >= 8mb to 8mb instead of 4mb$$$az storage blob upload: Change default max_connections for append blob to 1$$$az storage file upload/upload-batch: Fix --allow-trailing-dot breaking --connection-string usage$$$Fix #27899: az storage account create: Run check_name_availability() first and throw a warning when an existing account with the name is found

October 24; 2023$$$Version 2.53.1$$$$$$AKS$$$Hotfix: az aks update: Fix bug where supportPlan can be reset to None$$$App Service$$$[BREAKING CHANGE] Redact appsettings output on set/delete commands$$$

May 23; 2023$$$Version 2.49.0$$$$$$ACR$$$az acr create: Remove Classic from sku option$$$$$$$$$AKS$$$[BREAKING CHANGE] az aks create: Specify --pod-cidr with Azure CNI will return an error instead of logging a warning when not use overlay mode$$$[BREAKING CHANGE] az aks create: Change the default value of --enable-msi-auth-for-monitoring to true and add check for airgap clouds$$$az aks update: Support updating user assigned control plane identity for parameter --assign-identity$$$az aks install-cli: Add validation for installation path and update help message for parameters --install-location and --kubelogin-install-location$$$Fix #26353: az aks install-cli: Fix incorrect architecture detection on Darwin/arm64$$$az aks create/update: Add parameter --enable-azure-monitor-metrics to enable managed prometheus (Azure Monitor Metrics Addon)$$$az aks create/update: Add parameter --azure-monitor-workspace-resource-id to store metrics for the managed prometheus addon$$$az aks create/update: Add parameter --grafana-resource-id to link the Azure Monitor Workspace with a Grafana instance for viewing metrics and dashboards$$$az aks create/update: Add parameter --enable-windows-recording-rules to enable windows recording rule groups on the Azure Monitor Workspace (by default they get created but are disabled)$$$az aks create/update: Add parameter --ksm-metric-labels-allow-list to support the additional Kubernetes label keys that will be used in the resources labels metric$$$az aks create/update: Add parameter --ksm-metric-annotations-allow-list to support the Kubernetes annotations keys that will be used in the resources labels metric$$$az aks update: Add parameter --disable-azure-monitor-metrics to disable the Azure Monitor Metrics addon$$$az aks create and az aks nodepool add: Add warning message when specifying --os-sku to Mariner or CBLMariner

App Service$$$Hotfix: Use basic auth with SCM sites if supported; else use AAD auth

AKS$$$az aks create/update: Add --tier argument will specify the sku tier that customer wants$$$az aks nodepool operation-abort: Add new command to support aborting last running operation on nodepool$$$az aks operation-abort: Add new command to support aborting last running operation on managed cluster$$$az aks create: Raise a ClientRequestError when creating the same cluster again$$$az aks create/update: Add new parameter --enable-image-cleaner to enable Image Cleaner service$$$az aks create/update: Add new parameter --image-cleaner-interval-hours to set Image Cleaner scanning interval$$$az aks create: Add new parameter --network-plugin-mode to support creating Azure CNI Overlay clusters

March 07; 2023$$$Version 2.46.0$$$$$$ACR$$$az acr token\scope-map: Tokens and Scope-Maps are Generally Available$$$az acr manifest: Support oci image index$$$az acr cache: Add new command group to manage cache rules$$$az acr credential-set: Add new command group to manage credential sets$$$Fix #24886: az acr: Improve the 429 error handling for CONNECTIVITY_REFRESH_TOKEN_ERROR$$$AKS$$$az aks check-acr: Fix mariner node missing cert$$$Fix #25521: az aks nodepool upgrade: Fix the crashes when the version passed in through the parameter --kubernetes-version is the same as the cluster version$$$Fix #25530: az aks nodepool upgrade: Fix agent pool property name used for fetching current k8s version$$$az aks create: Add new parameter --pod-cidrs for setting the IP ranges used to allocate IPs to pods$$$az aks create: Add new parameter --service-cidrs for setting the K8s service IPs$$$az aks create: Add new parameter --ip-families for setting the IP types that should be used in a cluster (IPv4 or IPv6)$$$az aks create: Add new parameter --load-balanacer-managed-outbound-ipv6-count for setting the number of IPv6 outbound IPs that AKS should managed for a cluster with IPv6 enabled$$$az aks update: Support changing the load balancer managed outbound IPv6 count property$$$Fix #22321: az aks get-credentials: Fix path separator for Windows when finding kubeconfig_path$$$APIM$$$Fix #25168: az apim update: Fix the bug that --public-network-access doesnt work to disable public network access$$$App Service$$$az webapp deleted restore: Add new parameter --target-app-svc-plan to support setting app service plan for new azure web app$$$Fix #14729: az webapp config ssl upload: Refine error handling for OpenSSL.crypto.Error when obtaining the certificates thrumbprint failed$$$az functionapp create: Add new parameter --environment to support setting the name of container app environment$$$az webapp config ssl bind/unbind: Allow user to specify hostname to (un)bind with --hostname$$$az webapp config ssl create/upload/import: Allow user to specify certificate name with --certificate-name$$$az functionapp create: Add new parameter --environment to support setting the name of container app environment$$$ARM$$$az bicep publish: Update command to support new optional parameter --documentationUri$$$Fix #25510: az bicep: Set bicep.use_binary_from_path to false when installed using Azure CLI$$$az bicep format: Add new command to support formatting a Bicep file$$$$$$For more details; click https://learn.microsoft.com/en-us/cli/azure/release-notes-azure-cli

February 07; 2023$$$Version 2.45.0$$$$$$ACR$$$[BREAKING CHANGE] acr manifest list-referrers: Support OCI reference types and remove ORAS artifact reference types$$$az acr check-name: Make command work with different profile$$$AKS$$$Make ContainerInsights DataCollectionRuleName consistent with Portal and other onboarding clients$$$az aks upgrade: Show warning if the Kubernetes version isnt supplied$$$az aks create: Deprecate parameters --aad-client-app-id; --aad-server-app-id and --aad-server-app-secret$$$az aks update-credentials: Deprecate parameters --reset-aad; --aad-client-app-id; --aad-server-app-id and --aad-server-app-secret$$$App Service$$$az webapp create-remote-connection: Update the host address of SSH tunnel from 0.0.0.0 to 127.0.0.1$$$Add support to create ASPs with Memory Optimized Workers$$$Fix #17720: az functionapp function: Add new command to list functions in a function app$$$Fix #24285: az webapp config access-restriction add: Fix the bug that it does not support more than one Front Door ID in X-Azure-FDID$$$Fix #23603: az functionapp config set: Add new parameter to set PowerShell version$$$az webapp config appsettings: Register settings as deployment slot setting anytime when using --slot-settings$$$az webapp config backup delete: Add new command to delete a backup of the webapp$$$$$$For more details; click https://learn.microsoft.com/en-us/cli/azure/release-notes-azure-cli

Version 2.43.0$$$$$$Core$$$aaz: Fix has_value function for list; dict and object arg types (#24625)$$$aaz: Support argument preview and experimental (#24637)$$$aaz: Add registered property for AAZBaseArg (#24640)$$$aaz: Add aazlist and aazdict args transform help functions (#24690)$$$aaz: Support camel case key in AAZObjectType (#24771)$$$Disable removing and updating system extension in Cloud Shell (#24361)$$$AKS$$$az aks enable-addons: Add --enable-syslog parameter to monitoring addon$$$az aks nodepool: Unify the option names used to specify the nodepool name and cluster name. For nodepool name; option names are --nodepool-name; --name and -n. For cluster name; option name is --cluster-name$$$az aks nodepool add: Support the new SKU Mariner for parameter --os-sku$$$App Config$$$az appconfig: Update raised errors in app config command module$$$App Service$$$az staticwebapp backends link: Link an backend to a static webapp. Also known as Bring your own Backend.$$$az staticwebapp backends unlink: Unlink backend from a static webapp$$$az staticwebapp backends show: Show details on the backend linked to a static webapp$$$az staticwebapp backends validate: Validate an backend for a static webapp$$$az webapp config snapshot restore: Fix the AttributeError str object has no attribute get$$$az appservice plan create/update: Add new environment SKU for parameter --sku$$$az staticwebapp create: Add new parameter --login-with-ado to create azure dev ops token automatically$$$Fix #24506: az functionapp keys set/delete: Update the wrong accepted parameter value systemKey to systemKeys for --key-type$$$az webapp create: Add --public-network-access parameter to support enabling public access$$$az staticwebapp hostname show: Fix dns-txt-token validation command to show command$$$Fix #24620: az webapp create: Improve the error message to show that the az webapp list-runtimes command depends on the specified runtime$$$ARM$$$az deployment mg create: Add new parameter --mode to support setting the mode for deploying resources$$$az group lock list: Mark the --resource-group as required in help message$$$az bicep install: Address issue installing bicep on non-musl default systems with musl$$$Backup$$$az backup restore restore-disks: Allow --disk-encryption-set-id for cross region restore$$$Compute$$$Fix #24624: az sig image-version create: Fix the error that the --os-vhd-storage-account must be a managed disk or snapshot$$$IoT$$$Fix #22257: az iot dps linked-hub create: Improve error handling for linked hubs$$$az iot hub create/delete: Add --no-wait parameter to support no wait operation$$$Key Vault$$$az keyvault: Add check-name command; support Security Domain Properties$$$Monitor$$$az monitor diagnostic-settings: Add --marketplace-partner-id parameter$$$Network$$$az network bastion rdp: Allow rdp session customization$$$az network private-endpoint-connection: Enable private link support for provider Microsoft.DesktopVirtualization/hostpools and Microsoft.DesktopVirtualization/workspaces$$$az network application-gateway: Support OCSP revocation check on client certificate$$$az network traffic-manager endpoint: Add --always-serve to manage the health check on endpoints$$$az network public-ip create: Fix --ip-tags cannot be used$$$az network private-endpoint-connection: Add Provider Microsoft.MachineLearningServices/registries$$$RDBMS$$$az postgres flexible-server geo-restore/replica: Introduce read replicas and geo-restore$$$az postgres flexible-server upgrade: Add major version upgrade for PostgreSQL flexible server$$$az postgres flexible-server create/update/restore/replica: Postgres flex byok$$$az postgres flexible-server identity: Add user managed identity operations for PostgreSQL flexible server$$$az postgres flexible-server create/update/ad-admin: Add Azure Active Directory Administrator operations for PostgreSQL flexible server$$$Service Connector$$$az webapp/spring/containerapp connection create mysql: Deprecate mysql single server connection command$$$SQL$$$az sql server ipv6-firewall-rule

Version 2.40.0$$$$$$ACR$$$az acr config authentication-as-arm show: Add new command to support showing the configured Azure AD authenticate as ARM policy$$$az acr config authentication-as-arm update: Add new command to support updating Azure AD authenticate as ARM policy$$$az acr config soft-delete show: Add new command to show soft-delete policy$$$az acr config soft-delete update: Add new command to update soft-delete policy$$$az acr repository list-deleted: Add new command to list deleted repositories$$$az acr manifest list-deleted: Add new command to list deleted manifests$$$az acr manifest list-deleted-tags: Add new command to list deleted tags$$$az acr manifest restore: Add new command to restore deleted manifests and tags$$$az acr network-rule: Deprecate params --subnet and --vnet-name$$$acr config: Fix bug in some commands that would in certain circumstances attempt to pull a nonexistent model from SDK$$$$$$For more; refer : https://learn.microsoft.com/en-us/cli/azure/release-notes-azure-cli

Version 2.39.0$$$$$$ACR$$$[BREAKING CHANGE] Update manifest list-referrers to comply with RC1 ORAS spec$$$az acr update: Update networkRuleSet.defaultAction to deny when --public-network-enabled is disabled$$$Fix #23340: az acr task credential add: Fix crashes when given a password but no username$$$AD$$$az ad app federated-credential: Federated identity credential GA$$$Advisor$$$Fix #11070: az advisor recommendation disable: Fix NoneType error$$$AKS$$$Fix snapshot not resolved according to the subscriptions field in the --snapshot-id option$$$az aks check-acr: Bump canipull to v0.1.0 to add 5s wait to avoid attach race condition$$$az aks update: Fix the issue of NoneType error when updating the config of keyvault secret provider$$$Remove warning message when using BYO vnet + system MSI$$$Fix the bug related to AKS Monitoring MSI auth when the location value with spaces$$$Fix #2457: Clarify subnet id description to resource id$$$az aks create: Add new parameter --host-group-id to support Azure dedicated host$$$az aks nodepool add: Add new parameter --host-group-id to support Azure dedicated host$$$az aks create/update: Add new parameters --enable-azure-keyvault-kms; --azure-keyvault-kms-key-id; --azure-keyvault-kms-key-vault-network-access; --azure-keyvault-kms-key-vault-resource-id and --disable-azure-keyvault-kms to support Key Management Service feature with Azure Key Vault$$$az aks create: Add --network-plugin=none support for BYO CNI$$$az aks create/update: Add parameter --http-proxy-config to support setting HTTP Proxy configuration$$$App Service$$$Fix #23135: az functionapp plan create: Add validation for the valid value of --number-of-workers option$$$az functionapp/logicapp create: Add new --https-only parameter$$$az functionapp/webapp create: Allow vnet integration for basic and elastic premium SKUs$$$az webapp list-runtimes: Add Java 17 Support$$$az webapp create: Add Java 17 Support$$$az webapp up: Add Java 17 Support$$$az functionapp deployment github-actions add: Add command to create GitHub actions to deploy to a Function App$$$az functionapp deployment github-actions remove: Add command to remove Function App GitHub actions$$$az webapp deployment github-actions: Add validation to ensure app is Web App$$$ARM$$$Fix #23246: Fix interchanged policy samples$$$Backup$$$az backup protection backup-now: Fix bug for SQL/HANA backup retention$$$Batch$$$az batch account network-profile show: Add show network profile command for batch account$$$az batch account network-profile set: Add set network profile command for batch account$$$az batch account network-profile network-rule list: Add rule list command for batch account network$$$az batch account network-profile network-rule add: Add rule add command for batch account network$$$az batch account network-profile network-rule delete: Add rule delete command for batch account network$$$az batch account create: Add managed identity support with --mi-user-assigned parameter$$$az batch account identity assign: Add command to add identity to existing batch accounts$$$az batch account identity remove: Add remove identity for existing batch accounts$$$az batch account identity show: Add show identity for batch accounts$$$az batch pool create: Update help text for --json-file to point to json schema$$$Compute$$$az ppg create/update: Add parameter --intentvmsizes to specify possible sizes of VM that can be created in the proximity placement group$$$az ppg create: Add parameter --zone to support specifying availability zone where the ppg should be created$$$Fix #22995: az image-version create: Unbind the usage of --target-region-encryption and --target-region-cvm-encryption$$$Fix #22654: az vm run-command create/update: Parameter --protected-parameters does not achieve the desired effect$$$az vmss run-command create/update: Parameter --protected-parameters does not achieve the desired effect$$$az vmss create: Add new parameter --os-disk-delete-option to support configuring whether the VM OS disks of Flex VMSS will be deleted or d