June 03; 2025$$$Version 2.74.0$$$$$$ACR$$$az acr login: Add refreshToken and username fields to the output after using --expose-token parameter$$$az acr create: Fix logs for domain name label$$$az acr connected-registry: Remove private preview message$$$AKS$$$az aks nodepool add/update/upgrade: Add new parameter --undrainable-node-behavior to specify whether nodes can be cordoned during upgrade$$$az aks create/enable-addons: Remove preview flag for --enable-high-log-scale-mode parameter$$$az aks nodepool add/update/upgrade: Add --max-unavailable to specify he maximum number or percentage of nodes that can be simultaneously unavailable during upgrade$$$App Config$$$Fix #30619: az appconfig feature set: Fix invalid value for --requirement-type$$$Fix #30619: az appconfig kv import: Fix invalid value for --requirement-type$$$App Service$$$az appservice plan create: Update the description of --zone-redundant parameter$$$az webapp config set: Remove number of workers validation$$$ARM$$$az policy: Add breaking change pre-announcement$$$Backup$$$az backup container/item/policy/protection: Add support for ASE backup operations$$$az backup: Add support for HANA Snapshot$$$Compute$$$az vm/vmss create: Add warning log for changing the default value of VM size$$$Core$$$Resolve CVE-2024-13176$$$Resolve CVE-2024-9143$$$Cosmos DB$$$az cosmosdb sql container: Add Full Text Policy support$$$Identity$$$az identity federated-credential create/update: Add support for claims matching expressions$$$Monitor$$$az monitor action-group: Support --incident-receivers; --mi-user-assigned and --mi-system-assigned(#31205)$$$MySQL$$$az mysql flexible-server create: Change default storage redundancy for BC SKU to local redundancy$$$NetAppFiles$$$az netappfiles volume-group create: Add support for Oracle in ANF Volume Groups$$$Network$$$az network vnet-gateway create: Add --enable-high-bandwith-vpn-gateway parameter$$$az network vpn-connection show: Support new properties output with virtual network gateway$$$az network vnet-gateway migration: Support vpn gateway migration feature$$$az network private-endpoint-connection: Add provider Microsoft.FluidRelay/fluidRelayServers$$$az network network-watcher packet-capture: Support for packet capture includes a ring buffer$$$az network private-endpoint-connection: Add provider Microsoft.VideoIndexer/accounts$$$RDBMS$$$az postgres flexible-server create/db: Fix for --database-name validation$$$

May 20; 2025$$$Version 2.73.0$$$ACR$$$az acr connected-registry create/update: Add new parameter --gc-enabled which enables or disables garbage collection on a connected registry$$$az acr connected-registry create/update: Add new parameter --gc-schedule which uses cron expression to set a collection interval$$$az acr create/update: Add a new optional parameter --role-assignment-mode to specify the role assignment mode for new or existing registries. This parameter allows customers to enable or disable Attribute-Based Access Control (ABAC)$$$az acr check-health: Add a new optional parameter --repository to check read; write; and delete permissions for a specific repository$$$az acr task create/update: Add a new optional parameter --source-acr-auth-id to specify the managed identity used for authentication with the source registry$$$az acr build: Add a new optional parameter --source-acr-auth-id to specify the identity used for authentication with the source registry$$$az acr run: Add a new optional parameter --source-acr-auth-id to specify the identity used for authentication with the source registry$$$az acr create: Remove preview flag from --allow-trusted-services$$$AKS$$$[BREAKING CHANGE] az aks create: Change default value of option --node-vm-size to $$$[BREAKING CHANGE] az aks nodepool add: Change default value of option --node-vm-size to $$$az aks create/update: Add support for apiserver vnet integration feature$$$az aks create/approuting: Add default NIC config for app routing$$$Fix #31265: az aks enable-addons: Fix UnboundLocalError when setting specific dataCollectionSettings$$$App Service$$$[BREAKING CHANGE] az appservcie ase create/update/delete: Remove support for ASEv2$$$az webapp list-runtimes: Update API response filter logic$$$az functionapp plan update: Add zone redundant update support for Flex$$$Backup$$$[BREAKING CHANGE] az backup protection enable-for-vm: Support for protecting TVM with standard policy$$$Cloud$$$[BREAKING CHANGE] az cloud register/update: No gallery endpoint returned if use endpoint discovery with --endpoint-resource-manager$$$az cloud register/update: Support data plane endpoints auto discovery with --endpoint-resource-manager$$$Compute$$$[BREAKING CHANGE] az sig image-definition list-community/list-shared: Replace pagination parameters with new parameters --max-items and --next-token$$$[BREAKING CHANGE] az sig image-version list-community/list-shared: Replace pagination parameters with new parameters --max-items and --next-token$$$az vm/vmss create: Fix missing auxiliary tokens$$$az vmss create/update: Add new parameter --enable-automatic-zone-balancing to support setting automatic zone rebalancing policy$$$az vmss create/update: Add new parameter --automatic-zone-balancing-strategy to support setting automatic zone rebalancing policy$$$az vmss create/update: Add new parameter --automatic-zone-balancing-behavior to support setting automatic zone rebalancing policy$$$az vmss create/update: Add new parameter --skuprofile-rank to specify a list of ranks to use with VMSS instance mix SKU profile VM sizes$$$DMS$$$az dms project task create: Add ability to use a lockless option for ensuring data consistency$$$Key Vault$$$az keyvault key get-attestation: Support getting a MHSM keys attestation$$$Monitor$$$az monitor log-analytics workspace failover/failback: Add new commands for supporting activating and deactivating workspace failover$$$NetAppFiles$$$az volume-group create: Parameter --proximity-placement-group is no longer required$$$az netappfiles account create: Add new parameter --federated-client-id for Cross Tennant CMK$$$az netappfiles account create: Add new parameter --nfs-v4-id-domain. Domain for NFSv4 user ID mapping$$$az netappfiles account update: Add new parameter --federated-client-id for Cross Tennant CMK$$$az netappfiles account update: Add new parameter --nfs-v4-id-domain. Domain for NFSv4 user ID mapping$$$az netappfiles usage list: Add new command to list current subscription usages$$$az netappfiles usage show:

May 06; 2025$$$Version 2.72.0$$$$$$ACR$$$Fix #31130: az acr task show: Fix extra version line in encodedTask created by file$$$az acr create/check-name: Add parameter --dnl-scope for domain name label hash$$$AKS$$$az aks update: Make specified version to match current version when turning off autoupgrade$$$az aks nodepool add/update: Add option Ubuntu2204 to --os-sku parameter$$$az aks create: Add --custom-ca-trust-certificates parameter to support custom CA trust feature$$$az aks nodepool add: Add --custom-ca-trust-certificates parameter to support custom CA trust feature$$$az aks nodepool add: Add GPU driver install options --gpu-driver install and --gpu-driver none$$$App Config$$$az appconfig create/update: Add developer sku support$$$az appconfig feature set: Update feature name documentation$$$App Service$$$Fix #20983: az webapp config ssl import: Make web app a non-required parameter$$$az appservice plan create: Add Pv4/Pmv4 ASP support$$$Fix #20209: az webapp create-remote-connection: Add ssh command to output$$$ARM$$$az deployment: Fix issue where Bicep is not found in CI environments$$$Fix #31188: az lock delete: Fix the case sensitivity of --namespace parameter validation$$$ARO$$$az aro update: Ensure that refreshing cluster service principal credentials is successful when the cluster has an invalid or missing subnet in its resource definition$$$Compute$$$[BREAKING CHANGE] az sig image-version: Change the --os-vhd-storage-account parameter mapping to the properties.storageProfile.osDiskImage.source.storageAccountId property$$$[BREAKING CHANGE] az sig image-version: Change the --data-vhds-storage-accounts parameter mapping to the properties.storageProfile.dataDiskImages.source.storageAccountId property$$$az vm create: Add new parameter --zone-placement-policy to support setting vm placement to create a zonal VM$$$az vm create: Add new parameter --include-zones to support setting vm placement to create a zonal VM$$$az vm create: Add new parameter --exclude-zones to support setting vm placement to create a zonal VM$$$az vm create/update: Add new parameter --align-regional-disks-to-vm-zone to support setting regional disks attached to the VM to be converted to zonal$$$az sig image-version create/update: Rename shorter alias for --block-deletion-before-end-of-life parameter$$$az vm create/update: Add new parameters --wire-server-mode and --wire-server-access-control-profile-reference-id to support setting wireserver endpoint settings$$$az vmss create/update: Add new parameters --wire-server-mode and --wire-server-access-control-profile-reference-id to support setting wireserver endpoint settings$$$az vm create/update: Add new parameters --imds-mode and --imds-access-control-profile-reference-id to support setting IMDS endpoint settings$$$az vmss create/update: Add new parameters --imds-mode and --imds-access-control-profile-reference-id to support setting IMDS endpoint settings$$$az vm create/update: Add new parameter --key-incarnation-id to support setting key incarnation id$$$az vmss create/update: Add new parameter --key-incarnation-id to support setting key incarnation id$$$az vm/vmss create/update: Set --security-type to Standard only if explicitly set by end user

April 01; 2025$$$Version 2.71.0$$$ACR$$$az acr create: Fix a bug where creating cache rule without credential set would fail$$$AKS$$$az aks: Fix error message when outbound type validation failed$$$az aks create/update: Update recording rule group create logic for managed prometheus addon$$$az aks create/update: Add --bootstrap-artifact-source parameter to configure artifact source when bootstraping the cluster$$$az aks create/update: Add --bootstrap-container-registry-resource-id parameter to configure container registry resource ID$$$az aks create/update: Add new option none for --outbound-type parameter$$$App Config$$$az appconfig: Fix managed identity auth for --auth-mode login parameter$$$App Service$$$az webapp deploy: Add --enable-kudu-warmup parameter to support warm-up Kudu before making deployment$$$Fix #27724: az webapp config appsettings set: Remove redaction warning message from output$$$Fix #26920: az webapp deployment slot create: Make the created new slot has same VNet integration settings of source slot as Portal behavior$$$Fix #30908: az webapp snapshot restore: Fix the error no resource group found when trying to restore a snapshot backup to a paired region$$$Fix #29512: az webapp config backup update: Fix str object has no attribute name$$$Fix #21721: az webapp config storage-account add: Add validation for non-existent FileShare$$$az functionapp list-flexconsumption-locations: Add --details and --runtime parameters to provide more details$$$ARM$$$Fix #29809: az deployment/stack/bicep: Fix an issue where the commands mistakenly check for the latest Bicep version; even when use_binary_from_path is true and check_version is false$$$Fix #29435: az bicep install/upgrade: Fix an issue where the command downloads the x64 binary instead of the ARM binary on aarch64 machines$$$ARO$$$az aro create: Update VM SKU to align with best practices$$$Backup$$$az backup protection enable-for-vm: Update in warning message while protecting Trusted Launch virtual machines$$$Cloud$$$az cloud register/update: Add upcoming breaking change announcement$$$Compute$$$az sig image-definition list-shared: Mark --marker and --show-next-marker as deprecated and will be removed in the upcoming breaking change window$$$az sig image-version list-shared: Mark --marker and --show-next-marker as deprecated and will be removed in the upcoming breaking change window$$$az sig image-definition list-community: Mark --marker and --show-next-marker as deprecated and will be removed in the upcoming breaking change window$$$az sig image-version list-community: Mark --marker and --show-next-marker as deprecated and will be removed in the upcoming breaking change window$$$az disk config update: Add new command to support updating disk size gb by PATCH method$$$az vm/vmss create/update: Add support for setting security type to Standard$$$Fix #30976: az sig image-version create: Fix missing auxiliary tokens$$$az sig image-version create/update: Add new parameter --block-deletion-before-end-of-life to support blocking deletion if the end of life has not expired$$$az vm list-sizes: Mark the command as deprecated$$$Container app$$$Fix #30828: az containerapp job stop: Fix TypeError when --job-execution-name is not specified$$$Core$$$PREVIEW: Support managed identity authentication with MSAL. Run az config set core.use_msal_managed_identity=true or set environment variable AZURE_CORE_USE_MSAL_MANAGED_IDENTITY=true to enable it$$$Key Vault$$$az keyvault create: Support C SKU family for MHSM creation$$$MySQL$$$[BREAKING CHANGE] az mysql flexible-server create: Change default values for --auto-scale-iops; --version for MySQL$$$Network$$$az network virtual-appliance: Add command get-boot-diagnostic-log to support getting boot diagnostic logs$$$Fix #31003: az network vpn-connection create: Pass auxiliary authorization header for referenced resource IDs$$$az network vnet-gateway create: Add --enable-high-bandwith-vpn-gateway parameter$$$az network vpn-connection show: Support new properties with virtual network

March 04; 2025$$$Version 2.70.0$$$$$$AKS$$$az aks create/az aks nodepool add: Emit error message when using --asg-ids alone without --allowed-host-ports$$$az aks nodepool upgrade: Fix --node-soak-duration cannot be set to 0$$$az aks machine list: Add command to fetch list of machines in an agentpool$$$az aks machine show: Add command to fetch information about a specific machine in an agentpool$$$az aks nodepool delete: Add --ignore-pod-disruption-budget option for ignoring PodDisruptionBudget$$$az aks create: Add --message-of-the-day parameter to support message of the day$$$az aks nodepool add: Add --message-of-the-day parameter to support message of the day$$$App Config$$$az appconfig kv import/export: Fix bug when importing feature flag with percentile allocation property$$$az appconfig: Add support for custom token audience to --auth-mode login parameter$$$App Service$$$az functionapp create: Check if storage account is network restricted$$$az functionapp create: Refactor EOL message$$$Fix #28104: az webapp config storage-account: Remove windows limitation notes$$$Fix #28374: az webapp create: Improve error message for globally unique name for new app create$$$az webapp sitecontainers: Add new commands for linux web app sitecontainers$$$az webapp up: Add --enable-kudu-warmup parameter to support warm-up Kudu before making deployment$$$az webapp deploy: Add --enable-kudu-warmup parameter to support warm-up Kudu before making deployment$$$az webapp deployment source config-zip: Add --enable-kudu-warmup parameter to support warm-up Kudu before making deployment$$$Fix #29493: az webapp create: Update basic-auth parameter description$$$ARM$$$az bicep: Fix installation check for concurrent usages$$$Backup$$$az backup restore restore-disks: Support NoZone as a valid target zone for --target-zone parameter$$$Compute$$$az vm available-set create/update: Add --additional-scheduled-events parameter to support setting scheduled event policy$$$az vm available-set create/update: Add --enable-user-reboot-scheduled-events parameter to support setting scheduled event policy$$$az vm available-set create/update: Add --enable-user-redeploy-scheduled-events parameter to support setting scheduled event policy$$$Container app$$$az containerapp create: Fix to make --registry-username value to be DNS1123 compliant$$$Core$$$Resolve CVE-2024-12797$$$Drop Track 1 SDK authentication$$$aaz: Add cross tenants control for AAZResourceIdArgFormat$$$aaz: Support Any type with full value shorthand syntax allowed$$$Cosmos DB$$$az cosmosdb offline-region: Add new command to support offline region for cosmosdb account$$$IoT$$$az iot hub update: Add --min-tls-version parameter to allow updating min tls version in a cleaner way$$$NetAppFiles$$$az netappfiles account: Add new command change-key-vault to change KeyVault/Managed HSM that is used for encryption of volumes under NetApp account$$$az netappfiles account: Add new command get-key-vault-status to get KeyVault information. Response from this command can be used for transitiontocmk$$$az netappfiles account: Add new command transitiontocmk to transition all volumes in a VNet to a different encryption key source (Microsoft-managed key or Azure Key Vault). Operation fails if targeted volumes share encryption sibling set with volumes from another account$$$az netappfiles volume create/update: Add parameter --cool-access-tiering-policy$$$Network$$$az network nic ip-config create/update: Add --private-ip-address-prefix-length to support setting private ip address prefix length$$$RDBMS$$$az postgres flexible-server index-tuning: Support tuning options operations$$$Service Connector$$$az containerapp connection create redis: Add --system-identity paramter$$$az webapp connection create fabric-sql: Fix interactive mode & allow new parameters --fabric-workspace-uuid and fabric-sql-db-uuid$$$Storage$$$az storage account create: Add new --sku StandardV2_LRS/StandardV2_ZRS/StandardV2_ZRS/StandardV2_ZRS/PremiumV2_LRS/PremiumV2_ZRS for provisioned v2 support$$$az storage accoun

February 11; 2025$$$Version 2.69.0$$$$$$ACR$$$az acr manifest list-metadata: Update help messages for untagged manifests$$$AKS$$$az aks create/update/delete: Add parameters --if-match and --if-none-match to support etag functionality for concurrency$$$App Config$$$az appconfig kv import/export: Support microsoft feature management schema$$$az appconfig kv export: Introduce a new environment variable called AZURE_APPCONFIG_FM_COMPATIBILE when exporting to a file for backward compatibility for users$$$az appconfig feature show/list: Support microsoft feature management schema$$$az appconfig kv restore/show/list: Update datetime validation to accept timezone offset$$$az appconfig revision list: Update datetime validation to accept timezone offset$$$az appconfig export: Update export help message for environment variable$$$App Service$$$az functionapp create: Refactor EOL implementation and sort based on runtime EOL date$$$az functionapp list-flexconsumption-locations: Check if flex region is enabled for subscription$$$az functionapp deployment slot create: Add --https-only parameter for slot creation command$$$az webapp list-runtimes: Remove the JBoss _byol entries from the output for webapps with Linux OS$$$Backup$$$az backup: Add support for new AFS Vault Standard Policies$$$Batch$$$[BREAKING CHANGE] az batch certificate create/list/show/delete: Remove deprecated commands$$$[BREAKING CHANGE] az batch node reimage/remote-desktop: Remove deprecated commands$$$[BREAKING CHANGE] az batch pool create: Remove --application-licenses; --certificate-references ; --os-family and --os-version deprecated parameters$$$[BREAKING CHANGE] az batch pool set/reset : Remove --certificate-references deprecated parameter$$$az batch job create: Add parameters --job-manager-task-application-package-references and --on-all-tasks-complete$$$az batch job disable: Add parameter --json-file$$$az batch job-schedule create: Add parameters --job-manager-task-application-package-references; --job-metadata; and --job-manager-task-environment-settings$$$az batch job-schedule set/reset: Add parameters --job-max-task-retry-count and --job-max-wall-clock-time$$$az batch node reboot: Add parameter --json-file$$$az batch node scheduling disable: Add parameter --json-file$$$az batch pool autoscale evaluate: Add parameter --json-file$$$az batch pool create: Add parameters --start-task-environment-settings and --start-task-max-task-retry-count$$$az batch pool reset: Add parameters --start-task-resource-files and --target-node-communication-mode$$$Compute$$$[BREAKING CHANGE] az sig gallery-application create/update: Output field supportedOsType changed to supportedOSType$$$az vm list-sizes: Remove unused parameter --ids$$$az vmss create/update: Add new paramter --zone-balance to support setting zone balance$$$az vm/vmss create: Install guest attestation extension when security type set to ConfidentialVM$$$az vmss scale: Add new logic to support scaling VMSS in edge zone$$$az vmss create: Add --encryption-identity parameter to use managed identity for Azure disk encryption$$$az vmss encryption enable: Add --encryption-identity parameter to update or set encryption identity for Azure disk encryption$$$Container app$$$Fix #28047: az containerapp compose create: Upgrade pycomposefile version to split environment variables on the first equal sign instead of every equal sign$$$DevTest Labs$$$az lab vm: Add hibernate command group$$$Key Vault$$$az keyvault update/update-hsm: Fix --bypass overriding by default when specifying --default-action Deny$$$Network$$$az network lb create: Refine --frontend-ip-zone to support multiple zones$$$az network private-endpoint-connnection: Add Microsoft.HealthDataAiservices/deidservices for private endpoint connections$$$az network routeserver create/update: Add --auto-scale-config$$$az network virtual-appliance reimage: Allow reimage of virtual machines associated with a network virtual appliance$$$Profile$$$az login: Passing the managed identity ID with --username is deprecated and will be remo

January 14; 2025$$$Version 2.68.0$$$$$$ACR$$$az acr agentpool: Fix delete polling$$$az acr create: Add validation for registry name to support domain name label$$$AKS$$$az aks command invoke: Add progress spinner$$$az aks create/update: Add --enable-acns parameter to support enabling advanced networking functionalities on a cluster$$$az aks create/update: Add --disable-acns-observability parameter to disable advanced networking observability features when enabling advanced networking features with --enable-acns$$$az aks create/update: Add --disable-acns-security parameter to disable advanced networking security features when enabling advanced networking features with --enable-acns$$$az aks update: Add --disable-acns parameter to support disabling advanced networking functionalities on a cluster$$$az aks update: Add --ip-families to support updating cluster network$$$az aks create/update: Add --nrg-lockdown-restriction-level parameter to support specifying restriction level on the managed node resource group$$$App Config$$$az appconfig kv import: Fix import mode all bug$$$Compute$$$[BREAKING CHANGE] az disk: Refine output fields to align with backend service$$$[BREAKING CHANGE] az snapshot: Refine output fields to align with backend service$$$Fix #30009: az vm install-patches: Fix errors due to typos in install_vm_patches function$$$az vm/vmss create: Fix help message for --public-ip-address parameter$$$Fix #30565: az vm create: Fix creating VM with --patch-mode parameter$$$Fix #30564: az vm create: Fix creating VM with --enable-auto-update parameter$$$az vm create: Add --encryption-identity parameter to use that managed identity for Azure disk encryption$$$az vm encryption enable: Add --encryption-identity parameter to update or set encryption identity for Azure disk encryption$$$az vmss create/update: Add new parameter --security-posture-reference-is-overridable to support setting security posture reference overridable$$$az vmss create/update: Change existing parameter --security-posture-reference-exclude-extensions to receive string list$$$az vm create/update: Add new parameter --additional-scheduled-events to support setting scheduled event policy$$$az vm create/update: Add new parameter --enable-user-reboot-scheduled-events to support setting scheduled event policy$$$az vm create/update: Add new parameter --enable-user-redeploy-scheduled-events to support setting scheduled event policy$$$Container$$$az container exec: Fix exception when stdin is not a tty$$$Container app$$$az containerapp exec: Fix ResourceNotFound error$$$az containerapp ingress enable: Fix issue about labels being deleted$$$Fix #29238: az containerapp secret set: Add description about identityref for parameter --secrets$$$Cosmos DB$$$az cosmosdb create/update: Add --enable-prpp-autoscale to enable/disable burst capacity feature$$$Key Vault$$$az keyvault key sign/verify: Fix --digest to accept base64 encoded string$$$Microsoft Entra ID$$$az ad app create/update: Add --requested-access-token-version argument$$$MySQL$$$az mysql flexible-server create/restore/replica create/geo restore: Add --storage-redundancy parameter to support HA storage with zone redundancy$$$Network$$$az network vnet-gateway create/update: Add parameter --resiliency-model$$$az network vnet create/update: Add parameter --ipam-pool-prefix-allocations$$$Fix #30535: az network lb address-pool address add: Address level may not have virtual network property$$$Profile$$$Drop support for old-style managed identity account created by Azure CLI <= 2.0.50. If you upgrade from one of these versions; please run az login --identity again.$$$RDBMS$$$az postgres flexible-server create: Create elastic cluster by setting --cluster-option to ElasticCluster$$$az postgres flexible-server list: Add --show-cluster argument to list elastic clusters$$$az postgres flexible-server fabric-mirroring/identity: Support system assigned managed identity and fabric mirroring of databases$$$az postgres flexible-server update: Add --node-count argument to scale up elasti

October 01; 2024$$$Version 2.65.0$$$ACR$$$Fix #21900: az acr task identity remove: Fix incorrect operation_group setting$$$az acr credential-set: Improve help message$$$AD$$$az ad app create/update: Add --service-management-reference argument$$$AKS$$$az aks nodepool delete-machines: Add support to delete specific machines in an agent pool$$$App Config$$$az appconfig: Add premium SKU support$$$App Service$$$az functionapp config set: Map parameters explicitly for the internal update_site_configs function call$$$Compute$$$az vm/vmss create: Add --ssh-key-type parameter to support generating Ed25519 SSH keys$$$az vm image list: Expose ImageDeprecationStatus property in output$$$Container app$$$Fix #29849: az containerapp job stop: Fix stop execution response$$$Fix #29166: az containerapp compose create: Support image with tag and support get ACR from image$$$Cosmos DB$$$az cosmosdb restore: Add --disable-ttl to support for Restore with Time-To-Live Disabled$$$DataLake$$$az dla: Deprecate datalake analytics$$$HDInsight$$$az hdinsight update: Add parameter --assign-identity-type to allow to update to SystemAssigned identity.$$$Monitor$$$az monitor action-group create: Adjust formatting of --actions help message$$$az monitor action-group update: Adjust formatting of --add-actions help message$$$az monitor action-group notification create: Adjust formatting of --add-actions help message$$$MySQL$$$az mysql flexible-server create/update: Add --accelerated-logs to support configuring accelerated logs for Business Critical tier$$$NetAppFiles$$$az netappfiles volume create: Fix subnet id as resource id$$$Network$$$az network vnet peering: Refine command interface of subnet peering$$$Packaging$$$Release Docker image based on Azure Linux 3.0$$$Include jq in Azure Linux docker image$$$Drop Debian 10 support$$$Use Azure Linux 3.0 (mcr.microsoft.com/azurelinux/base/core:3.0) as the base image for docker image tag latest and 2.65.0$$$Profile$$$az login: Fall back to device code flow in GitHub Codespaces$$$RDBMS$$$az postgres flexible-server update: Support case-insensitive input for --tier; --performance-tier; --sku; and --maintenance-window$$$az postgres flexible-server migration create: Add AWS_AURORA as a migration source type for PostgreSql$$$SQL$$$az sql elastic-pool create: Set min_capacity to None for non-serverless SKUs$$$az sql mi create/update: Add gpv2 parameter and iops parameter

September 03; 2024$$$Version 2.64.0$$$$$$ACR$$$az acr helm: Improve deprecation message$$$AKS$$$az aks nodepool update: Add --enable/disable-fips-image flags for GA mutable fips$$$az aks create/update: Support UserAssigned Managed Identity for grafana linking in managed prometheus$$$az aks create/update: Update the VM SKU regex validation to include larger set of VMs for Azure Container Storage$$$App Service$$$az staticwebapp create/update: Add Dedicated as supported SKU$$$az webapp config set: Add MinTlsCipherSuite support$$$az webapp config access-restriction add/remove: Allow skipping service tag validation$$$ARM$$$az ts create: Fix incorrect handling of whitespace in string values$$$ARO$$$az aro create: Add feature for adding Multiple Public IPs on cluster load balancer$$$az aro update: Add feature for adding/removing Multiple Public IPs on cluster load balancer$$$Compute$$$az vm update: Add support of Gen1 VM to trusted launch upgrade$$$az capacity reservation: GA command group$$$Container app$$$Fix #28998: az containerapp env workload-profile add/update: Fix NoneType object is not iterable error when environment doesnt enable workload profile$$$az containerapp create/up: Make --target-port optional$$$az containerapp env create: Deprecate unused argument --docker-bridge-cidr$$$az containerapp job stop: Deprecate option to stop list of given job executions$$$Fix #29711: az containerapp logs show: Fix JSON escaping by default or with --format json$$$HDInsight$$$az hdinsight create: Support setting IP tags when creating HDInsight cluster$$$az hdinsight update: Support updating the managed identity of the cluster$$$az hdinsight azure-monitor-agent show: Support getting the managed identity of the cluster$$$az hdinsight azure-monitor-agent enable: Enable the Azure Monitor Agent logs integration on an HDInsight cluster$$$az hdinsight azure-monitor-agent disable: Disable the Azure Monitor Agent logs integration on an HDInsight cluster$$$MySQL$$$az mysql flexible-server maintenance: New command group for managing maintenance of MySQL flexible server$$$az mysql flexible-server update: Remove storage passing for server update$$$NetAppFiles$$$az netappfiles volume create/update: Update max for --usage-threshold$$$Network$$$Fix #29565: az network nat gateway create: Add --tags parameter$$$Packaging$$$Support Python 3.12$$$Release Azure Linux 3 RPM package$$$[BREAKING CHANGE] Use CBL-Mariner 2.0 (mcr.microsoft.com/cbl-mariner/base/core:2.0) as the base image for docker image tag latest and 2.64.0$$$Redis$$$az redis create/update: Add --disable-access-keys to support disabling auth through access keys$$$SQL$$$az sql mi create/update: Add --authentication-metadata to support auth metadata configuration$$$Storage$$$az storage account create/update: Support account cold-tier$$$az storage copy/remove: Add --auth-mode login support$$$az storage share delete: Add include-leased for --delete-snapshots

August 06; 2024$$$Version 2.63.0$$$$$$ACR$$$az acr login: Support optional resource group argument to skip subscription resource scan$$$AKS$$$az aks create: Not set the --network-plugin based on the default from the Python SDK$$$az aks create/update: Support in place param updates for managed Prometheus$$$az aks create/update: Add validations for PremiumV2 disk$$$az aks upgrade: Support tier switch with AKS upgrade$$$az aks create/update: Add --network-policy none option to command$$$az aks create: Remove unsupported scenario command in help message$$$App Config$$$az appconfig import/export/restore: Add correlation request id to bulk operations$$$App Service$$$az webapp list-runtimes: Add parameter --show-runtime-details to show detailed runtime stacks and update the format of java related stacks listed$$$az webapp create: Add parameter --acr-identity to allow users to choose user assigned identity for ACR image pull$$$az webapp config set: Add parameter --acr-use-identity and --acr-identity to allow users update ACR image pull related configs$$$ARM$$$az stack group/sub/mg create: Minor improvements to the confirmation message when updating an existing stack$$$CDN$$$Fix #28717: az afd secret: Change the way to access parameter$$$az cdn portal-migration: Add command group for classic CDN profile migration$$$Compute$$$az sig create/update: Hide --soft-delete parameter in help messages$$$Fix #29006: az ssh: Fix the Permissions 0644 for ... are too open error$$$az vmss update: Add new parameter --enable-auto-os-upgrade to support updating automatic OS upgrade policy argument$$$az vmss update: Add new parameter --upgrade-policy-mode to support updating upgrade policy mode$$$Container app$$$Fix #26688: az containerapp up: Fix logic about updating an existing containerapp$$$az containerapp job stop: Return custom message for stop job execution$$$Fix #29330: az containerapp auth update: Fix split logic for --set$$$Core$$$Resolve CVE-2024-39689$$$Resolve CVE-2024-6345$$$Support az config set extension.dynamic_install_allow_preview for extension dynamic installation configuration$$$az logout: Remove service principal access tokens from token cache$$$Cosmos DB$$$az cosmosdb delete: Support --no-wait$$$MySQL$$$az mysql flexible-server import stop-replication: Stop replication between source single server and target flexible server$$$NetAppFiles$$$az netappfiles account create: Change --key-vault-resource-id to be optional$$$Network$$$az network custom-ip prefix create: Add parameter --is-parent$$$az network network-watcher connection-monitor: Support to create connection monitor v2$$$az network vnet peering: Support virtual network subnet peering$$$Packaging$$$Drop Alpine Docker image$$$RDBMS$$$[BREAKING CHANGE] az postgres flexible-server create: Update default value of PG version to be 16$$$Fix #27422: az postgres flexible-server create: Bug fix for using existing subnet while creating pg flex server$$$az postgres flexible-server restore: Bug fix when using resource id as value for source-server argument$$$Role$$$az role assignment list: Add warning for classic administrators retirement$$$Service Connector$$$az containerapp connection create containerapp: Support ACA2ACA connection$$$SQL$$$az sql midb move/copy: Add destination subscription Id for managed database move/copy$$$az sql mi create: Add --dns-zone-partner optional parameter$$$Storage$$$az storage fs directory upload/download: Add back --auth-mode login as AzCopy supports Oauth now$$$az storage blob sync: Add back --auth-mode login as AzCopy supports Oauth now$$$Synapse$$$az synapse spark job submit: Add optional --python-files argument to support job submission

July 09; 2024$$$Version 2.62.0$$$$$$ACR$$$az acr build/task: Highlight the difference between arguments in the description$$$AKS$$$az aks create/update: Update AMW resource.location to only accept alphanumeric characters$$$az aks create/update: Add Azure Managed Grafana support for managed prometheus addon in usnat$$$az aks create/update: Ephemeral disk additional support for Azure Container Storage$$$az aks create/update: Add and fix existing validations for ephemeral disk support for Azure Container Storage$$$App Config$$$az appconfig: Update help message for App Configuration store$$$az appconfig kv import: Update the help message for ignore-match$$$App Service$$$az webapp deploy: Disable deploymentstatus API for deployments to app slots$$$az webapp deployment source config-zip: Disable deploymentstatus API for deployments to app slots$$$Fix #29041: az webapp config access-restriction add: Fix edge case validating service tags$$$az functionapp create: Avoid throwing exception when endOfLifeDate not passed from stacks API$$$ARM$$$az stack mg create: Validate MG stacks automatically before creation$$$az bicep restore: Fix typos in help messages$$$Backup$$$az backup restore restore-disks/restore-azurewl/restore-azurefiles/restore-azurefileshare: Add --tenant-id for cross-tenant MUA protection; otherwise allows restore when protected by a resource guard$$$az backup vault encryption update: Add support for MUA for CMK operations$$$CDN$$$Fix #28721: az afd origin-group create: Add parameter to support session affinity state$$$Fix #28824: az cdn profile: Add default location$$$Fix #28733: az cdn endpoint update: Add support to update an existing endpoint$$$Compute$$$az vmss update: Add new parameter --zones to support setting vmss zonal expansion$$$az vm install-patches: Add new parameter --max-patch-publish-date to support setting max patch publish date$$$az vmss reimage: Add new parameter --force-update-os-disk-for-ephemeral to support updating the base OS disk$$$az vmss create/update: Add new parameter --scheduled-event-additional-publishing-target-event-grid-and-resource-graph to support setting scheduled event policy$$$az vmss create/update: Add new parameter --enable-user-reboot-scheduled-events to support setting policy for rebooting scheduled event$$$az vmss create/update: Add new parameter --enable-user-redeploy-scheduled-events to support setting policy for redeploying scheduled event$$$az vmss update: Add an option Standard to --security-type parameter$$$az vmss create: Support set upgrade policy mode to automatic during flexible VMSS creation$$$az sig image-definition create: Fix default value of security type$$$Container app$$$az containerapp env create/update: Support peer-to-peer traffic encryption with --enable-peer-to-peer-encryption$$$az containerapp job update: Fix poll logic and --no-wait$$$az containerapp show-custom-domain-verification-id: Show verification id used for binding custom domain$$$az containerapp env update: Fix logs configuration about removing destination with --logs-destination none$$$az containerapp list-usages: Support list-usages in subscription$$$Fix #28983: az containerapp job registry: Support commands for modifying the jobs registries$$$az containerapp auth: Support Token Store with --token-store; --sas-url-secret; --sas-url-secret-name; --yes$$$Fix #29128: az containerapp env certificate: Support managed certificate$$$Fix #29172: az containerapp secret set: Remove the limit of length for secret name$$$Core$$$Fix #28997: Fix error User cancelled the Accounts Control Operation when logging in with WAM as Administrator$$$Resolve CVE-2024-37891$$$Resolve CVE-2024-35195$$$aaz: Add argument completer support$$$Cosmos DB$$$az service create: Add --gateway-type to support multiple dedicated gateway types$$$MySQL$$$az mysql flexible-server update: Support replica resource group different with primary server$$$az mysql flexible-server detach-vnet: New command to support converting a vnet azure mysql server to a non-vnet server$$$az mysql flexible-

May 21; 2024$$$Version 2.61.0$$$$$$AKS$$$[BREAKING CHANGE] az aks create: Specifying --enable-managed-identity and --service-principal/--client-secret at the same time will cause a MutuallyExclusiveArgumentError$$$[BREAKING CHANGE] az aks create: Change the default value of option --enable-managed-identity from True to False$$$az aks mesh upgrade rollback/complete: Add --yes parameter to support not prompting the users to confirm the operation$$$az aks create/update: Add SecurityPatch option to --node-os-upgrade-channel parameter$$$az aks create/update: Add new parameter --enable-cost-analysis to enable exporting Kubernetes namespace and deployment details to the Cost Analysis views$$$az aks create: Backfill the value of --enable-managed-identity to True when options --service-principal and --client-secret are not specified at the same time$$$az aks nodepool update: Add option --os-sku to support updating os sku in place$$$az aks create: Add --ampls-resource-id and --enable-high-log-scale-mode optional parameters for Monitoring Addon$$$az aks enable-addons: Add --ampls-resource-id and --enable-high-log-scale-mode optional parameters$$$App Service$$$[BREAKING CHANGE] az webapp deploy: Use deployment status API for deployment output for Linux Web Apps$$$[BREAKING CHANGE] az webapp up: Use deployment status API for deployment output for Linux Web Apps$$$[BREAKING CHANGE] az webapp deployment source config-zip: Use deployment status API for deployment output for Linux Web Apps$$$az functionapp scale config always-ready: Set alwaysReady property to empty array if it is null$$$az functionapp: Update messaging for flex function apps$$$az functionapp deployment source config-zip: Allow users with no Microsoft.Web/serverFarm read privileges to deploy function apps$$$az webapp list: Fix the bug --show-details fails while resource group name is not specified$$$az webapp list-runtimes/create/up: Add Java 21 support$$$az functionapp create: Use stacks API netFrameworkVersion value instead of the default value from the Python SDK$$$az functionapp create: The linuxFxVersion for dotnet-isolated linux consumption apps will no longer be left empty$$$az functionapp: Not block execution of command when runtime cannot be detected; and omit showing warning for runtime when not applicable (e.g. centauri apps; apps running a docker image)$$$az appservice plan create/update: Add IsolatedV2 memory intensive SKU support$$$az functionapp create: If customers do not provide an image when creating a Centauri function app; we use the updated default Centauri image$$$$$$For more details - https://learn.microsoft.com/en-us/cli/azure/release-notes-azure-cli#may-21-2024

April 30; 2024$$$Version 2.60.0$$$$$$ACR$$$[BREAKING CHANGE] az acr connected-registry create: Mode default value change from ReadWrite to ReadOnly$$$az acr connected-registry create: If data-endpoint disabled ask for confirmation to enable it instead of throwing an error$$$AKS$$$az aks create/update: Prompt warning during disablement about CR deletion$$$az aks create/update: Udpate RP registration code to work on azure monitor subscription$$$az aks create/update: Update to add default region for workspace creation in air gapped cloud$$$az aks nodepool add: Add parameter --disable-windows-outbound-nat to add a Windows agent pool which the Windows OutboundNAT is disabled$$$App Service$$$az webapp config container set: Remove docker prefix and rename container related parameters$$$az webapp create and az webapp deployment slot create: Rename --docker-registry-server-user and --docker-registry-server-password to --container-registry-user and --container-registry-password$$$az webapp create and az webapp deployment slot create: Add parameters --container-image-name and container-registry-url to deprecate --deployment-container-image-name$$$az webapp create and az logicapp create: Update help message$$$az webapp config set: Add new parameter --runtime to allow users to update their stack by using single parameter$$$az functionapp create: Remove unnecessary app settings for flex function apps$$$Fix #28588: az webapp config access-restriction add: Check for null before getting values$$$az webapp config access-restriction set: Add new parameter --default-action to configure default action for main site$$$az webapp config access-restriction set: Add new parameter --scm-default-action to configure default action for scm site$$$az webapp list: Add parameter --show-details to include detailed site configuration of listed webapps in output$$$az functionapp create: Will validate that the provided runtime is supported by flex when creating a flex function app$$$az functionapp list-flexconsumption-runtimes: Add support for this new command so that it provides the list of supported flex runtimes when provided the --location and --runtime$$$ARM$$$az bicep install: Support additional process architectures with Bicep CLI$$$az deployment: Return better message on incorrect bicepparam file path$$$az bicep format: Replace --newline with --newline-kind$$$az bicep publish: Replace --documentationUri with --documentation-uri$$$Backup$$$az backup vault update: Take --tenant-id as input for resolving cross-tenant resource guard scenarios. Vault Immutability feature also has resource guard protection now; and support for the same has been added.$$$az backup protection disable: Take --tenant-id as input for resolving cross-tenant resource guard scenarios. Stop protection feature also has resource guard protection now; and support for the same has been added.$$$Batch$$$az batch pool create: Add --upgrade-policy-mode argument to support automatic OS upgrade$$$az batch pool create: Add --enable-auto-os-upgrade argument to enable automatic OS upgrade$$$az batch pool create: Add --disable-auto-rollback argument to disable OS image rollback feature$$$az batch pool create: Add --defer-os-rolling-upgrade argument to defer OS upgrades on the TVMs if they are running tasks$$$az batch pool create: Add --use-rolling-upgrade-policy argument to support OS rolling upgrade policy$$$az batch pool create: Add --enable-cross-zone-upgrade argument to support cross zone OS upgrade$$$az batch pool create: Add --max-batch-instance-percent argument to set the maximum percent of total VMs that will be upgraded in one batch$$$az batch pool create: Add --max-unhealthy-instance-percent argument to set the maximum percentage of the total VMs can be simultaneously unhealthy$$$az batch pool create: Add --max-unhealthy-upgraded-instance-percent argument to set the maximum percentage of upgraded VMs that can be found to be in an unhealthy state$$$az batch pool create: Add --pause-time-between-batches argument to set the wait tim

April 02; 2024$$$Version 2.59.0$$$$$$ACR$$$Fix #14768: az acr login: Add environment variable for docker command$$$ACS$$$az aks create: Add flag --enable-app-routing to enable app routing$$$az aks approuting: Add command group to handle enable/disable/update of the app routing addon$$$az aks approuting zone: Add command group to handle add/delete/update/list actions of DNS zone resources associated to the approuting addon$$$az aks create/update: Introduce changes for Azure container storage in ACS CLI$$$AD$$$az ad: Rename Azure Active Directory to Microsoft Entra ID$$$AKS$$$az aks create: Add optional parameter --revision to set revision for the Azure Service Mesh addon while creating AKS cluster$$$az aks mesh get-upgrades: Fix command failure with a traceback if ASM addon is disabled$$$az aks create/update: Enable mooncake support for managed prometheus addon$$$az aks create/update: Block Azure Managed Grafana for managed prometheus addon in air gapped cloud$$$az aks create: Correct use of comma-separated in help$$$App Config$$$az appconfig feature filter update: GA command$$$az appconfig kv export: GA parameter --export-as-reference$$$App Service$$$az functionapp create: Add support for Node 20 for Flex function apps$$$az functionapp create: Make Node 20 the default for node flex function apps and Python 3.11 the default for python flex function apps$$$az functionapp create: Add support for SystemAssignedIdentity and UserAssignedIdentity as the deployment storage authentication type$$$az webapp update: Add new parameter --elastic-web-app-scale-limit and scaling parameter options$$$az appservice plan update: Add new parameter --elastic-web-app-scale-limit and scaling parameter options$$$az webapp deployment source config-zip: Mark this command as deprecated; recommend using the az webapp deploy command instead of it$$$ARM$$$az stack group create: Deprecate the --delete-resources; --delete-resource-groups and --delete-all options and redirect to the new --action-on-unmanage argument$$$az stack group delete: Deprecate the --delete-resources; --delete-resource-groups and --delete-all options and redirect to the new --action-on-unmanage argument$$$az stack sub create: Deprecate the --delete-resources; --delete-resource-groups and --delete-all options and redirect to the new --action-on-unmanage argument$$$az stack sub delete: Deprecate the --delete-resources; --delete-resource-groups and --delete-all options and redirect to the new --action-on-unmanage argument$$$az stack mg create: Deprecate the --delete-resources; --delete-resource-groups and --delete-all options and redirect to the new --action-on-unmanage argument$$$az stack mg delete: Deprecate the --delete-resources; --delete-resource-groups and --delete-all options and redirect to the new --action-on-unmanage argument$$$az deployment: Treat nullable parameters as non-required for Bicep deployment$$$ARO$$$az aro create/validate: Fix bug in permissions validation that was preventing cluster creation in cases where the invoking user had the necessary permissions$$$CDN$$$az afd profile: Add parameter --identity$$$Compute$$$az snapshot grant-access: Add parameter --file-format to support specifying file format when making request for SAS on a VHDX file format snapshot$$$az vmss create: Add --enable-auto-os-upgrade parameter to support automatic OS Upgrade while creating VMSS$$$az sig image-definition create: Add warning message for Hyper-V generation and Security Type$$$az vmss create/update: Add parameters to specify the security posture to be used for all virtual machines in the scale set$$$az capacity reservation group create/update: Add new parameter --sharing-profile to support sharing capacity reservation group across subscriptions$$$az snapshot create: Add parameter --bandwidth-copy-speed to allow a snapshot to be copied at a quicker speed$$$DataBoxEdge$$$az databoxedge device: Add command group share to support managing device share$$$az databoxedge device: Add command group user to support managing device user$$$

March 05; 2024$$$Version 2.58.0$$$$$$ACR$$$az acr: Update registry and webhook example names to be lowercase$$$az acr create/update: Add new argument --allow-metadata-search to enable the metadata-search feature for the registry$$$AKS$$$Add monitoring addon to support default workspace in AGC$$$az aks get-versions: Show extra column on supportPlan$$$az aks create/update: Update region map for default region creation with new Azure Monitor Workspace regions$$$az aks update: Zero can be set to outbound-ports;outbound-ip-count in loadbalancer profile and outbound-ip-count in natgateway profile in AKS$$$API Management$$$az apim api export: Add command to export an API Management API$$$App Service$$$az webapp up/create/update: Add new parameter --basic-auth to allow users to enable and disable basic auth$$$ARM$$$Fix #27855: az bicep generate-params: Bicep install messages sent to stdout$$$Backup$$$[BREAKING CHANGE] az backup item set-policy: Add warning prompt for migration from Standard to Enhanced Policy$$$Batch$$$az batch pool create: Add new parameter --resource-tags to support specifying resource tags for the pool. Any resource created for the pool will then also be tagged by the same resource tags$$$az batch pool create: Add new parameters --security-type; --encryption-at-host; --secure-boot-enabled; and --v-tpm-enabled to support Trusted Launch Security Type for VMs/VMSS deployments$$$az batch pool create: Add new parameters --caching; --disk-size-gb; --write-accelerator-enabled; and --storage-account-type to support Batch Node Agent temp disk-less SKUs$$$CDN$$$Fix #28240: az afd rule create: Cannot create without condition$$$Fix #28223: az afd route create: Cannot create without --content-types-to-compress$$$Fix #27744: az afd origin-group: Add parameter --enable-health-probe$$$Compute$$$az vmss nic: Update help messages to guild users to specific commands for Flexible VMSS$$$az vm host redeploy: Add command to redeploy the dedicated host$$$Fix #28397: az vm create: Fix creating VM with --security-type Standard$$$az vmss application set: Fix updates to the purchase plan are not supported when updating VMSS$$$az vmss update-domain-walk: Add new command to support updating vm in a service fabric vmss$$$Containerapp$$$az containerapp revision copy: Fix --from-revision bug for inheriting a specific revision contains scale rules$$$az containerapp update: Fix TypeError: Argument of type NoneType is not iterable$$$Fix #28226: az containerapp job update: Update existing scale rules if --scale-rule-name is passed$$$Core$$$[BREAKING CHANGE] az login: Replace allow_broker with enable_broker_on_windows (#27726)$$$Cosmos DB$$$az cosmosdb sql database/container restore: Fix support for restore of deleted database resource in the same SQL account$$$az cosmosdb mongodb database/collection restore: Fix support for restore of deleted database resource in the same MongoDB account$$$az cosmosdb gremlin database/graph restore: Fix support for restore of deleted database resource in the same gremlin account$$$az cosmosdb table restore: Fix support for restore of deleted table resource in the same account$$$MySQL$$$az mysql flexible-server import create: Change the default progress message from starting to running$$$Network$$$az network virtual-appliance connection: Add show and list commands for NVA connection$$$az network vnet-gateway: Add parameters --allow-remote-vnet-traffic and --allow-vwan-traffic$$$az network express-route gateway: Add parameter --allow-non-vwan-traffic$$$RDBMS$$$Fix #27713: az postgres flexible-server list-skus -o table: Fix table output from list-skus command$$$Security$$$az security api-collection: Manage Azure API Management API connections to Microsoft Defender for APIs$$$az security security-connector: Manage cloud security posture management (CSPM) and cloud workload protection (CWP) across multicloud resources$$$SQL VM$$$Fix #27300: az sql vm group create: --cluster-subnet-type should only be passed into WsfcDomainProfile$$$Storage$$$Fix #28356: az storage account or-

January 09; 2024$$$Version 2.56.0$$$$$$AKS$$$az aks create/update: Add new parameter --load-balancer-backend-pool-type to define the Load Balancer backend pool type of managed inbound backend pool$$$az aks create: Add parameter --node-public-ip-tags to specify the ipTags of the node public IPs$$$az aks nodepool: Add parameter --node-public-ip-tags to specify the ipTags of the node public IPs$$$az aks create and az aks nodepool add: Add crg-id option to create nodepool with Capacity Reservation Group$$$az aks stop: Add warning when private link cluster is stopped$$$az aks trustedaccess role: Add new command group to manage trusted access roles$$$az aks trustedaccess rolebinding: Add new command group to manage trusted access role bindings$$$az aks trustedaccess rolebinding list: Add new command to list all the trusted access role bindings$$$az aks trustedaccess rolebinding show: Add new command to get the specific trusted access role binding according to binding name$$$az aks trustedaccess rolebinding create: Add new command to create a new trusted access role binding$$$az aks trustedaccess rolebinding update: Add new command to update an existing trusted access role binding$$$az aks trustedaccess rolebinding delete: Add new command to delete a trusted access role binding according to name$$$az aks update: Add parameter --network-plugin to update the network plugin of the AKS cluster$$$App Config$$$az appconfig feature set: Add requirement type to feature command$$$App Service$$$az functionapp create: Add DAPR support for Centauri apps$$$az functionapp create: Remove workarounds for Centauri$$$az webapp deploy: Add --track-status arg to use deploymentstatus API$$$az functionapp create: Add workload profile support for Centauri apps$$$ARM$$$az bicep publish: Add optional parameter --with-source to publish source code with the module (experimental)$$$az lock delete: Fix the case sensitive comparison issue for resource group name$$$Compute$$$az vmss create: Change --orchestration-mode to support only uniform for old profile$$$az vm/vmss create/update: Add new parameters --enable-proxy-agent and --proxy-agent-mode to support azure metadata security protocol$$$az vm/vmss create: Add new option NonPersistedTPM for parameter --os-disk-security-encryption-type to support creating Intel TDX based Confidential VM$$$Containerapp$$$az containerapp job update: Fix bug for minExecutions in --yaml is not set when the value is 0$$$az containerapp hostname bind: Fix an issue about parsing the environments resource group when the --environment is a resource id$$$Cosmos DB$$$az cosmosdb sql database restore: Add support for restore of deleted database resource in the same SQL account$$$az cosmosdb sql container restore: Add support for restore of deleted container resource in the same SQL account$$$az cosmosdb mongodb database restore: Add support for restore of deleted database resource in the same MongoDB account$$$az cosmosdb mongodb collection restore: Add support for restore of deleted collection resource in the same MongoDB account$$$az cosmosdb gremlin database restore: Add support for restore of deleted database resource in the same gremlin account$$$az cosmosdb gremlin graph restore: Add support for restore of deleted graph resource in the same gremlin account$$$az cosmosdb table restore: Add support for restore of deleted table resource in the same account$$$Eventhub$$$az eventhubs georecovery-alias create: Name parameter is required$$$Extension$$$az extension: Enable extension semantic versioning and join experimental into preview$$$az extension add/update: Add --allow-preview to distinguish stable-only installation with preview-included installation$$$Key Vault$$$az keyvault create/update-hsm: GA --mi-user-assigned$$$az keyvault backup/restore start: GA --use-managed-identity$$$Monitor$$$az monitor log-analytics workspace: Add list-link-target and list-available-service-tier$$$Network$$$az network application-gateway waf-config list-dynamic-rule-sets: Support to get the WAF dynamic ma

December 05; 2023$$$Version 2.55.0$$$$$$ACR$$$az acr login: Allow registry names with hyphen$$$Fix #27487: az acr check-health: Fix DOCKER_PULL_ERROR when acr check-health for Mac OS$$$AKS$$$az aks update: Update outbound ip description and remove limitation$$$az aks create: Add arguments --asg-ids and --allowed-host-ports$$$az aks nodepool add/update: Add arguments --asg-ids and --allowed-host-ports$$$App Service$$$Fix #27189: az webapp log tail: Catch exception when scm connection is lost$$$Billing$$$az billing period list: Fix --top does not work as expected$$$az billing invoice download: Fix command does not work$$$az billing invoice list: Fix --period-end-date and --period-start-date help message error$$$Compute$$$az disk create: Add new parameter --optimized-for-frequent-attach to improve reliability and performance of data disks that are frequently attached$$$az disk/snapshot create: Add new parameter --elastic-san-resource-id to support creating through the ARM id of elastic san volume snapshot$$$Containerapp$$$az containerapp ingress cors enable: Only update arguments --allow-headers; --allow-credentials; --allow-methods; --expose-methods; --max-age when the value is not None$$$az containerapp: Change the container-app name and container-app job name in the example to legal names$$$Key Vault$$$az keyvault backup start: Add status in output$$$Monitor$$$az monitor activity-log alert: Upgrade api-version to 2020-10-01 to include any-of query condition$$$az monitor activity-log alert: Expose parameter all-of to enable user modifying query condition specifically$$$Network$$$az network private-endpoint-connection: Add provider Microsoft.DBforPostgreSQL/flexibleServers$$$az network public-ip prefix: Add parameter --tier$$$RDBMS$$$az postgres flexible-server replica create: Add support for parameters like --tier; --sku-name; --storage-size during replica creation$$$az postgres flexible-server update: Add support for custom IOPS update for flexible server using --performance-tier$$$az postgres flexible-server advanced-threat-protection-setting show: Show advanced threat protection setting$$$az postgres flexible-server advanced-threat-protection-setting update: Update advanced threat protection setting using --state as Enabled/Disabled$$$Service Connector$$$az containerapp connection create: Enable Key Vault Reference in Container Apps$$$SQL$$$az instance-pool create/update: Add optional parameter --maintenance-configuration-id for SQL Instance Pool resource$$$az mi create/update: Add optional parameter --instance-pool-name for SQL Managed Server resource$$$Storage$$$az storage blob upload: Increase max_block_size for append/block blobs of size >= 8mb to 8mb instead of 4mb$$$az storage blob upload: Change default max_connections for append blob to 1$$$az storage file upload/upload-batch: Fix --allow-trailing-dot breaking --connection-string usage$$$Fix #27899: az storage account create: Run check_name_availability() first and throw a warning when an existing account with the name is found

October 24; 2023$$$Version 2.53.1$$$$$$AKS$$$Hotfix: az aks update: Fix bug where supportPlan can be reset to None$$$App Service$$$[BREAKING CHANGE] Redact appsettings output on set/delete commands