Update Terraform azurerm to v5

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
azurerm (source)	required_provider	major	4.72.0 → 5.0.1

---

Release Notes

hashicorp/terraform-provider-azurerm (azurerm)

v5.0.1

Compare Source

5.0.1 (July 30, 2026)

NOTES:

In addition to the bug fixes below, a number of resource documentation pages and the 5.0-upgrade-guide have been updated.

BUG FIXES:

• azurerm_cdn_frontdoor_origin - fix a regression that prevented valid values as input to private_link.private_link_target_id (#​32912)
• azurerm_storage_queue - add a state migration for the id field, fixing the upgrade path from 4.x to 5.x (#​32914)
• azurerm_storage_table_entity - add a state migration for the storage_table_id field, fixing the upgrade path from 4.x to 5.x (#​32929)

v5.0.0

Compare Source

NOTES:

• Major Version: Version 5.0 of the Azure Provider is a major version - some behaviours have changed and some deprecated fields/resources have been removed - please refer to the 5.0 upgrade guide for more information.
• When upgrading to v5.0 of the AzureRM Provider, we recommend upgrading to the latest version of Terraform Core (which can be found here).

FEATURES:

• New Action: azurerm_web_app_set_slot_distribution (#​32364)
• New Datasource adds azurerm_kubernetes_automatic_cluster_datasource (#​32881)

ENHANCEMENTS:

• dependencies: grpc update to 1.82.1 (#​32852)
• dependencies: loadbalancers - update to API version 2025-01-01 (#​32644)
• azurerm_cognitive_account_rai_policy - the content_filter.severity_threshold property is now optional (#​32100)
• azurerm_container_registry - the trust_policy_enabled property has been deprecated and removed from the provider (#​32752)
• azurerm_dashboard_grafana - the 11 value for the grafana_major_version property has been deprecated and the property now supports 13 (#​32777)
• azurerm_log_analytics_workspace - add support for the internet_ingestion_access_type and internet_query_access_type properties (#​32562)
• azurerm_subnet - add support for the network_security_group_id_wo and network_security_group_id_wo_version properties (#​32847)
• azurerm_subnet - add support for the route_table_id_wo and route_table_id_wo_version properties (#​32847)
• azurerm_subnet - export the network_security_group_id property (#​32847)
• azurerm_subnet - export the route_table_id property (#​32847)
• azurerm_windows_web_app - add support for ~24 to site_config.application_stack.node_version (#​32840)
• azurerm_windows_web_app_slot - add support for ~24 to site_config.application_stack.node_version (#​32840)
• cdn - migrate to go-azure-sdk (#​32849)
• sentinel - migrate to go-azure-sdk (#​32759)

v4.81.0

Compare Source

FEATURES:

• New Data Source: azurerm_cdn_frontdoor_batch_rule_set (#​32733)
• New List Resource: azurerm_backup_policy_vm (#​32736)
• New List Resource: azurerm_cdn_frontdoor_batch_rule_set (#​32733)
• New List Resource: azurerm_cognitive_account_connection_account_key (#​30981)
• New List Resource: azurerm_cognitive_account_connection_account_managed_identity (#​30981)
• New List Resource: azurerm_cognitive_account_connection_api_key ((#​30981)
• New List Resource: azurerm_cognitive_account_connection_custom_keys (#​30981)
• New List Resource: azurerm_cognitive_account_connection_entra_id (#​30981)
• New List Resource: azurerm_federated_identity_credential (#​32672)
• New List Resource: azurerm_monitor_scheduled_query_rules_alert (#​32701)
• New List Resource: azurerm_servicebus_customer_managed_identity (#​32315)
• New List Resource: azurerm_web_pubsub_custom_certificate (#​32192)
• New Resource: azurerm_cdn_frontdoor_batch_rule_set (#​32733)
• New Resource: azurerm_cognitive_account_connection_account_key (#​30981)
• New Resource: azurerm_cognitive_account_connection_account_managed_identity (#​30981)
• New Resource: azurerm_cognitive_account_connection_api_key ((#​30981)
• New Resource: azurerm_cognitive_account_connection_custom_keys (#​30981)
• New Resource: azurerm_cognitive_account_connection_entra_id (#​30981)
• New Resource: azurerm_log_analytics_workspace_table_microsoft (#​31754)
• azurerm_servicebus_subscription - added new provider feature flag that will remove the "$Default" rule immediately on new subscription creation (#​32452)
• New Resource: azurerm_storage_account_table_properties (#​32282)

ENHANCEMENTS:

• dependencies: go - update to 1.26.5
• dependencies: x/crypto - update to v0.54.0
• dependencies: cdn - update to API version 2025-12-01 (#​32719)
• dependencies: compute - update to API version 2025-04-01 (#​32592)
• dependencies: go-azure-helpers - update to v0.81.1 (#​32732)
• dependencies: go-azure-sdk - update to v0.20260709.1191450 (#​32768)
• dependencies: keyvault - update to API version 2026-02-01 (#​32320)
• Data Source: azurerm_logic_app_standard - add new return attribute storage_key_vault_secret_id which will be set if the app service "AzureWebJobsStorage" property had a KeyVault reference format (#​32571)
• azurerm_cdn_frontdoor_endpoint - migrate to go-azure-sdk (#​32741)
• azurerm_container_registry Add support for azuread_authentication_as_arm_policy_enabled, role_assignment_mode and network_rule_bypass_allowed_for_tasks properties (#​31667)
• azurerm_logic_app_standard - add attribute storage_key_vault_secret_id which can be used in place of storage_account_name and storage_account_key, allowing the app service property "AzureWebJobsStorage" to reference a key vault secret in the format "@​Microsoft.KeyVault(SecretUri=...)" (#​32571)
• azurerm_orchestrated_virtual_machine_scale_set - support for the tags property within the network_interface block (#​32592)

BUG FIXES:

• azurerm_cdn_frontdoor_custom_domain - fix a validation regression that prevented previously valid wildcard inputs to the host_name property (#​32738)
• azurerm_network_security_perimeter_association - fix create/update methods to poll for async operation completion before returning (#​32742)
• azurerm_palo_alto_next_generation_firewall_virtual_hub_strata_cloud_manager - fix an issue that set arguments not present in schema causing an error (#​32768)
• azurerm_palo_alto_next_generation_firewall_virtual_network_strata_cloud_manager - fix an issue that set arguments not present in schema causing an error (#​32768)
• azurerm_virtual_hub_connection - remote_virtual_network_id value will now be parsed case insensitive (#​32734)

v4.80.0

Compare Source

ENHANCEMENTS:

• dependencies: go-azure-sdk - update to v0.20260629.1154953 (#​32691)
• dependencies: managedhsm - update to API version 2026-02-01 (#​32377)
• azurerm_cdn_frontdoor_custom_domain - add basic validation for the host_name property (#​32349)
• azurerm_cdn_frontdoor_custom_domain - improve validation for additional host_name constraints when tls.certificate_type is ManagedCertificate (#​32349)

BUG FIXES:

• azurerm_machine_learning_datastore_fileshare - fix 5.0 migration bug for the storage_fileshare_id property (#​32586)

v4.79.0

Compare Source

FEATURES:

• New Action: azurerm_netapp_volume_bucket_credentials (#​32319)
• New Data Source: azurerm_netapp_volume_bucket (#​32319)
• New Data Source: azurerm_netapp_volume_bucket_with_server(#​32319)
• New List Resource: azurerm_netapp_volume_bucket (#​32319)
• New List Resource: azurerm_netapp_volume_bucket_with_server(#​32319)
• New List Resource: azurerm_signalr_service_custom_certificate (#​32114)
• New Resource: azurerm_netapp_volume_bucket (#​32319)
• New Resource: azurerm_netapp_volume_bucket_with_server(#​32319)

ENHANCEMENTS:

• azurerm_batch_job - migrate to go-azure-sdk (#​32662)
• azurerm_data_protection_backup_instance_data_lake_storage - increase the limit of items for storage_container_names from 100 to 1000 (#​32643)
• azurerm_postgresql_flexible_server - add Ddsv6 skus to validation (#​32657)
• azurerm_virtual_network_gateway - add support for maximum_scale_unit and minimum_scale_unit (#​32647)
• desktopvirtualization - upgrade API version to 2025-10-10 (#​32563)

v4.78.0

Compare Source

FEATURES:

• New List Resource: azurerm_signalr_service_custom_domain (#​32124)
• New List Resource: azurerm_storage_sync_server_endpoint (#​31988)

ENHANCEMENTS:

• dependencies: go-azure-sdk - update to v0.20260616.1142719 (#​32631)
• Data Source: azurerm_network_manager_connectivity_configuration - export the connected_group_address_overlap, connected_group_private_endpoints_scale, and peering_enforcement properties (#​31562)
• Data Source: azurerm_storage_container - export the url property (#​29036)
• azurerm_kubernetes_cluster - add support KataVmIsolation for workload_runtime (#​32579)
• azurerm_kubernetes_cluster_node_pool - add support KataVmIsolation for workload_runtime (#​32579)
• azurerm_mssql_managed_instance - add support for the storage_iops property (#​32250)
• azurerm_network_manager_connectivity_configuration - add support for the connected_group_address_overlap, connected_group_private_endpoints_scale, and peering_enforcement properties (#​31562)
• azurerm_storage_container - export the url property (#​29036)

BUG FIXES:

• azurerm_cosmosdb_account - fix an issue that prevented diffs on geo_location.zone_redundant from showing (#​32620)
• azurerm_express_route_connection - fix an issue that caused unintentional changes to internet_security_enabled on updates (#​32498)
• azurerm_static_web_app - fix an issue that caused updates to fail once a private endpoint was attached (#​32631)

v4.77.0

Compare Source

FEATURES:

• New List Resource: azurerm_key_vault (#​32408)
• New List Resource: azurerm_web_pubsub_custom_domain (#​32186)

ENHANCEMENTS:

• dependencies: go - update to 1.26.4 (#​32539)
• dependencies: go-azure-sdk - update to v0.20260603.1074745 (#​32503)
• Data Source: azurerm_storage_blob - the storage_account_name and storage_container_name properties have been deprecated in favour of the storage_container_id property (#​32235)
• Data Source: azurerm_storage_table - the storage_account_name property has been deprecated in favour of the storage_account_id property (#​32235)
• azurerm_machine_learning_workspace - add support for the storage_account_access_type property (#​32514)
• azurerm_storage_blob - the storage_account_name and storage_container_name properties have been deprecated in favour of the storage_container_id property (#​32235)
• azurerm_storage_container - the storage_account_name property has been deprecated in favour of the storage_account_id property (#​32235)
• azurerm_storage_object_replication - add support for the metrics_enabled property (#​32204)
• azurerm_storage_queue - the storage_account_name property has been deprecated in favour of the storage_account_id property (#​32235)
• azurerm_storage_table - the storage_account_name property has been deprecated in favour of the storage_account_id property (#​32235)

BUG FIXES:

• azurerm_mssql_managed_instance - fix an issue that caused an error when changing from a GP_* SKU to a BC_* SKU (#​32560)
• azurerm_network_manager_deployment - add a custom poller to work around an API issue on creation (#​32530)
• azurerm_recovery_services_vault_resource_guard_association - normalize resource_guard_id before persisting to state to work around an API issue (#​32554)
• azurerm_subnet - fix an issue that incorrectly caused a validation error when increasing ip_address_pool.number_of_ip_addresses (#​32500)
• azurerm_virtual_network - fix an issue that incorrectly caused a validation error when increasing ip_address_pool.number_of_ip_addresses (#​32500)

v4.76.0

Compare Source

ENHANCEMENTS:

• Action: azurerm_virtual_machine_power - power_action now supports deallocate (#​32492)
• azurerm_key_vault_key - add support for the release_policy block (#​32478)

BUG FIXES:

• azurerm_federated_identity_credential - fix update logic, preventing import errors on updates (#​32522)
• azurerm_netapp_account - the update function now uses the PUT operation to fix a removal issue with the active_directory property (#​32494)
• azurerm_netapp_account - fix drift detection for the active_directory and identity properties (#​32494)
• azurerm_netapp_volume_group_oracle - fix validation for the application_identifier property (#​32499)
• azurerm_oracle_resource_anchor - fix validation for the name property to allow hyphens (#​32481)

v4.75.0

Compare Source

FEATURES:

• provider: adds support for the features.persist_id_on_create_before_polling_for_completion feature (#​32318)
• provider: adds support for the features.skip_import_check_on_create_and_allow_overwriting_existing_resources feature (#​32318)

ENHANCEMENTS:

• dependencies: azurerm_cdn_frontdoor - update API version to 2025-12-01 (#​32461)
• dependencies: cognitive - update API version to 2026-03-01 (#​32427)
• dependencies: recoveryservices/vaults - update to API Version 2025-08-01 (#​31163)
• Data Source: azurerm_orchestrated_virtual_machine_scale_set - export the sku_profile block (#​30260)
• azurerm_application_gateway - add support for certificate_chain_validation_enabled, sni_validation_enabled, and sni_name properties to backend_http_settings (#​31206)
• azurerm_data_factory_linked_service_mysql - add support for the driver_version property (#​32076)
• azurerm_data_protection_backup_instance_data_lake_storage - add FriendlyName on Create to align with other backup instance resources (#​32351)
• azurerm_mongo_cluster - the storage_size_in_gb property now allows values of up to 32768 (#​32428)
• azurerm_mssql_managed_instance_transparent_data_encryption - support versionless key_vault_key_id (#​32399)
• azurerm_orchestrated_virtual_machine_scale_set - add support for the virtual_machine_size block (#​30260)
• azurerm_redhat_openshift_cluster - update API version to 2025-07-25 (#​32029)
• azurerm_windows_function_app - add support for 7.6 to the site_config.application_stack.powershell_core_version property (#​32448)
• azurerm_windows_function_app_slot - add support for 7.6 to the site_config.application_stack.powershell_core_version property (#​32448)

BUG FIXES:

• Data Source: azurerm_virtual_network_gateway - fixed issue returning correct value for deprecated enable_bgp property (#​32422)
• azurerm_api_management_backend - the proxy.username property is now optional (#​32433)
• azurerm_cosmosdb_sql_container - fix Read function to ensure the resource is able to track drift (#​32443)
• azurerm_site_recovery_vmware_replicated_vm - fixes a bug where test_subnet_name not set correctly (#​32407)

v4.74.0

Compare Source

ENHANCEMENTS:

• dependencies: go-azure-sdk - update to v0.20260520.1145341 (#​32420)
• azurerm_advisor_recommendations - add support for the filter_by_resource_ids and filter_by_recommendation_type_guids properties (#​26220)
• azurerm_data_factory_integration_runtime_azure - add support for the interactive_authoring_time_to_live_in_minutes property (#​32316)
• azurerm_linux_function_app - add support for minimum_tls_cipher_suite property (#​26584)
• azurerm_linux_web_app - add support for minimum_tls_cipher_suite property (#​26584)
• azurerm_logic_app_standard - add support for key_vault_reference_identity_id (#​30010)
• azurerm_windows_function_app - add support for minimum_tls_cipher_suite property (#​26584)
• azurerm_windows_web_app - add support for minimum_tls_cipher_suite property (#​26584)

BUG FIXES:

• azurerm_container_app_environment - allow names that start with a digit (#​32267)
• azurerm_logic_app_standard - fix the update path for the app_service_plan_id property (#​32421)
• azurerm_virtual_network_gateway set radius_server_secret to sensitive (#​32419)

v4.73.0

Compare Source

FEATURES:

• New List Resource: azurerm_storage_mover_job_definition (#​32184)
• New List Resource: azurerm_storage_mover_project (#​32183)

ENHANCEMENTS:

• azurerm_cdn_frontdoor_firewall_policy - add support for the 429, 990, 991, 992, 993, 994, 995, 996, 997, 998, and 999 values in the custom_block_response_status_code property (#​32312)
• azurerm_container_app_job - add support for identity_id property to scaling.rules (#​31312)
• azurerm_databricks_workspace - add support for the values FEDRAMP_MODERATE, IRAP_PROTECTED, FEDRAMP_HIGH, FEDRAMP_IL5, ITAR_EAR, CYBER_ESSENTIAL_PLUS, CANADA_PROTECTED_B, ISMAP, HITRUST, K_FSI, GERMANY_C5, and GERMANY_TISAX in the compliance_security_profile_standards property (#​32163)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.