Az

Author(s)

• Microsoft Corporation

Tags

Azure ARM ResourceManager Linux AzureAutomationNotSupported

PSEditions

Core Desktop

Dependencies

• • Az.Accounts (>= 5.5.3)
  • Az.Advisor (= 3.0.0)
  • Az.Aks (= 7.2.1)
  • Az.AnalysisServices (= 1.3.0)
  • Az.ApiManagement (= 4.2.0)
  • Az.App (= 2.0.1)
  • Az.AppConfiguration (= 2.2.0)
  • Az.ApplicationInsights (= 3.0.0)
  • Az.ArcResourceBridge (= 2.0.0)
  • Az.Attestation (= 3.1.0)
  • Az.Automanage (= 2.0.0)
  • Az.Automation (= 1.12.1)
  • Az.Batch (= 4.1.1)
  • Az.Billing (= 2.3.0)
  • Az.Cdn (= 6.2.0)
  • Az.CloudService (= 3.0.0)
  • Az.CognitiveServices (= 1.17.1)
  • Az.Compute (= 11.10.0)
  • Az.ConfidentialLedger (= 2.0.0)
  • Az.ConnectedMachine (= 1.1.1)
  • Az.ContainerInstance (= 5.1.0)
  • Az.ContainerRegistry (= 5.2.0)
  • Az.CosmosDB (= 1.22.0)
  • Az.DataBoxEdge (= 1.3.0)
  • Az.Databricks (= 2.0.0)
  • Az.DataFactory (= 1.20.2)
  • Az.DataLakeAnalytics (= 1.2.0)
  • Az.DataLakeStore (= 1.6.0)
  • Az.DataMigration (= 1.1.1)
  • Az.DataProtection (= 3.1.0)
  • Az.DataShare (= 1.2.0)
  • Az.DataTransfer (= 1.0.0)
  • Az.DesktopVirtualization (= 6.0.0)
  • Az.DevCenter (= 3.0.0)
  • Az.DeviceRegistry (= 1.0.0)
  • Az.DevTestLabs (= 1.2.0)
  • Az.Discovery (= 1.0.0)
  • Az.Dns (= 2.2.0)
  • Az.DnsResolver (= 2.0.0)
  • Az.ElasticSan (= 1.7.0)
  • Az.EventGrid (= 2.3.0)
  • Az.EventHub (= 5.7.0)
  • Az.Fabric (= 1.0.0)
  • Az.FileShare (= 1.0.0)
  • Az.FirmwareAnalysis (= 1.0.0)
  • Az.FrontDoor (= 2.3.0)
  • Az.Functions (= 5.0.1)
  • Az.HDInsight (= 6.5.0)
  • Az.HealthcareApis (= 3.0.0)
  • Az.HealthDataAIServices (= 1.0.0)
  • Az.IotHub (= 2.9.2)
  • Az.KeyVault (= 6.6.1)
  • Az.Kusto (= 3.1.0)
  • Az.LoadTesting (= 2.0.0)
  • Az.LogicApp (= 1.7.0)
  • Az.MachineLearning (= 1.3.0)
  • Az.MachineLearningServices (= 2.0.0)
  • Az.Maintenance (= 1.7.1)
  • Az.ManagedServiceIdentity (= 2.1.0)
  • Az.ManagedServices (= 4.0.0)
  • Az.MarketplaceOrdering (= 2.2.0)
  • Az.Migrate (= 3.1.0)
  • Az.Mission (= 1.0.0)
  • Az.Monitor (= 8.1.0)
  • Az.MySql (= 2.0.0)
  • Az.NetAppFiles (= 1.4.1)
  • Az.Network (= 8.3.0)
  • Az.NetworkCloud (= 3.0.0)
  • Az.Nginx (= 2.0.0)
  • Az.NotificationHubs (= 1.3.0)
  • Az.OperationalInsights (= 3.4.1)
  • Az.Oracle (= 2.0.0)
  • Az.PolicyInsights (= 2.0.0)
  • Az.PowerBIEmbedded (= 2.2.0)
  • Az.PrivateDns (= 1.3.0)
  • Az.RecoveryServices (= 7.15.0)
  • Az.RedisCache (= 1.12.0)
  • Az.RedisEnterpriseCache (= 2.0.0)
  • Az.Relay (= 3.0.0)
  • Az.ResourceGraph (= 1.3.0)
  • Az.ResourceMover (= 2.0.0)
  • Az.Resources (= 10.2.1)
  • Az.Security (= 1.10.0)
  • Az.SecurityInsights (= 4.0.0)
  • Az.ServiceBus (= 4.4.0)
  • Az.ServiceFabric (= 5.2.0)
  • Az.SignalR (= 3.0.0)
  • Az.Sql (= 7.2.0)
  • Az.SqlVirtualMachine (= 3.0.0)
  • Az.StackHCI (= 3.0.0)
  • Az.StackHCIVM (= 2.0.0)
  • Az.Storage (= 9.7.2)
  • Az.StorageAction (= 2.0.0)
  • Az.StorageDiscovery (= 1.0.0)
  • Az.StorageMover (= 2.1.0)
  • Az.StorageSync (= 2.7.0)
  • Az.StreamAnalytics (= 3.0.0)
  • Az.Support (= 2.1.0)
  • Az.Synapse (= 3.3.0)
  • Az.TrafficManager (= 1.4.0)
  • Az.Websites (= 4.2.0)
  • Az.Workloads (= 2.0.0)

Release Notes

16.4.0 - October 2026
Az.Compute
* Added '-ScheduleProfileStart' and '-MinimumCommitmentDayCount' parameters to 'New-AzCapacityReservation' to create Future Capacity Reservations, and surfaced the read-only 'ScheduleProfile' (including 'ModifiableUntil') and instance view 'ReservationStateInfo' on 'Get-AzCapacityReservation' output.
* Added 'SpotPlus' as a supported value for the '-Priority' parameter of 'New-AzVM', 'New-AzVMConfig', 'New-AzVmss', and 'New-AzVmssConfig'.
   - 'SpotPlus' is the next generation of Azure Spot for VM (Virtual Machine) and VMSS (Virtual Machine Scale Set) deployments, and offers higher reliability and longer running time than 'Spot'.
   - '-EvictionPolicy' and '-MaxPrice' behave the same way as they do for 'Spot'.
   - Requires the 'Microsoft.Compute/SpotPlus' subscription feature to be registered, and a region where the feature is enabled.
* For 'New-AzVM': If the extension-version catalogue lookup fails, the cmdlet uses the default BGInfo (Background Information) extension version, and installation failures now emit a warning rather than terminating the cmdlet.
* Added cmdlets and parameters to configure first-party service tags for implicit public IP addresses on VMs (Virtual Machines) and VMSS (Virtual Machine Scale Sets).
* Added extension release metadata support to 'Get-AzVMExtensionImage'.
   - Use '-Expand Properties' when listing extension versions to include release category, urgency level, and run profile metadata. [Azure/azure-powershell-cmdlet-review-pr#1571](https://github.com/Azure/azure-powershell-cmdlet-review-pr/issues/1571)

Az.ContainerInstance
* Added Change Safety support.

Az.ContainerRegistry
* Added Change Safety support for additional cmdlets.

Az.DataFactory
* Updated the 'Update-AzDataFactoryV2IntegrationRuntime' example output to use a public service URL.

Az.DataProtection
* Upgraded the DataProtection API version to '2026-06-01' (general availability), which natively models the Azure Elastic SAN (Storage Area Network) backup and restore types
* Added 'AzureElasticSAN' datasource support for backup and restore
   - Added '-ResourceSelector' parameter to 'New-AzDataProtectionBackupConfigurationClientObject' for selecting the volume to back up (the service currently supports one volume per backup instance)
   - Added '-ResourceIdentifier' and '-ResourceNameOverride' parameters to 'New-AzDataProtectionRestoreConfigurationClientObject' for selecting and optionally renaming the volume to restore
   - Enabled 'AzureElasticSAN' in 'Initialize-AzDataProtectionRestoreRequest' and 'Set-AzDataProtectionMSIPermission'
* Added cost management granularity support to backup vault creation and update cmdlets
   - Added '-CostManagementGranularity' parameter to 'New-AzDataProtectionBackupVault' and 'Update-AzDataProtectionBackupVault'
   - Allowed values are 'VaultLevel', 'ProtectedItemLevel', 'ProtectedItemWithParentTag'

Az.Discovery
* General availability for module Az.Discovery

Az.EventGrid
* Added Change Safety support.

Az.EventHub
* Added Change Safety support for additional cmdlets.
* Fixed Change Safety parameter forwarding in custom read-before-write and GeoDR cmdlets.

Az.Kusto
* Added Change Safety support.

Az.Maintenance
* Changed scheduled event approval failures to terminating PowerShell errors displaying the HTTP status and service error JSON. HTTP 200 and list HTTP 207 responses remain normal output.
* Updated 'Approve-AzScheduledEventList' to return multi-status results through 'Error.Details' with target IDs supplied by the service.

Az.ManagedServiceIdentity
* Added Change Safety support.

Az.Migrate
* Updated Azure Data Replication API version from 2024-09-01 to 2026-05-01
* Added 'MigrateAsArcVM' parameter to 'New-AzMigrateLocalServerReplication' to support migrating VMs as Azure Arc-enabled VMs

Az.Mission
* General availability release for module Az.Mission targeting the stable Microsoft.Mission API version 2026-04-01

Az.Monitor
* Added Change Safety support for data collection rule cmdlets.

Az.Network
* Fixed Change Safety parameter forwarding in custom read-before-write cmdlets.
* Added provider-led ExpressRoute cross-connection migration commands.
* Added First Party Service Tag association support to IP tags used by 'New-AzPublicIpPrefix'.
* Added support for provisioning an ExpressRoute circuit on an 'ExpressRouteLag' resource (Microsoft.Network 2026-01-01 API).
* Added 'MigrateGatewayForPointToSiteProfile' as a supported value for the '-MigrationType' parameter of 'New-AzVirtualNetworkGatewayMigrationParameter', and fixed the cmdlet to honor the user-provided '-MigrationType' value.
* Added Application Gateway advanced routing support.
* Added 'AdvancedRouting' as a supported value for '-RuleType' on 'New-AzApplicationGatewayRequestRoutingRule', 'Add-AzApplicationGatewayRequestRoutingRule', and 'Set-AzApplicationGatewayRequestRoutingRule'.
* Added '-VerifyClientAuthMode' to 'New-AzApplicationGatewayClientAuthConfiguration' and 'Set-AzApplicationGatewayClientAuthConfiguration' to select the frontend mutual TLS (mTLS) client certificate verification mode.
* Upgraded Network SDK to API version '2026-01-01'.
* Fixed '-EnableOnlyIpv6Peering' on 'New-AzVirtualHubVnetConnection' so that the 'Enabled' and 'Disabled' values are correctly translated to the boolean 'enableOnlyIPv6Peering' property expected by the service.
* Added minimum and maximum allocation size bounds to IPAM pool creation, update, and output.
* Added 'Get-AzExpressRouteCircuitAuthorizationKey' and 'Get-AzExpressRoutePortAuthorizationKey' to retrieve the authorization key for an ExpressRoute circuit or port authorization (Microsoft.Network 2026-01-01 API).
* Added WAF (Web Application Firewall) managed rule set display name and managed rule paranoia level to Application Gateway WAF cmdlet output.
* Added 'SourceGeoLocation' and 'DestinationGeoLocation' filters to 'New-AzFirewallPolicyNetworkRule'.
* Removed client-side validation of the '-FormatVersion' parameter for 'New-AzNetworkWatcherFlowLog' and 'Set-AzNetworkWatcherFlowLog'.
* Added Change Safety support for additional cmdlets.
* Added the 'CAPTCHA' action to Application Gateway WAF policies.

Az.RecoveryServices
* Moved Instant Item Recovery (ILR) mount script retrieval to the dedicated 'listInstantItemRecoveryOperationResult' action (api-version '2026-08-01'); 'Get-AzRecoveryServicesBackupRPMountScript' no longer reads iSCSI CHAP connection details from the broad ILR operation-status response (MSRC-114273).
* Added Managed Identity (MI) based authentication support for Azure File Share backup:
   - Supports identity-based registration and restore for Azure File Share backup, including Cross Subscription Restore.
* Fixed 'New-AzRecoveryServicesVault' and 'Update-AzRecoveryServicesVault' to use the AsPerPolicy configuration by default when enabling vault immutability.
* Fixed cross-subscription Azure VM protection for virtual machines with user-assigned managed identities.
* Added Microsoft Defender for Cloud Source Scan configuration for Recovery Services vaults and Azure Virtual Machine backup items.
   - Supports vault and protected-item configuration and exposes Source Scan and threat details in backup output.

Az.Resources
* Aligned deployment stack WhatIfResult tag preservation with deployment stack cmdlets when '-Tag' is omitted or explicitly given a null value.

Az.ServiceBus
* Added Change Safety support for additional cmdlets.
* Fixed Change Safety parameter forwarding in custom read-before-write and GeoDR cmdlets.

Az.Sql
* Exposed the backup storage redundancy type in the output of 'Get-AzSqlInstanceDatabaseLongTermRetentionBackup'.
* Fixed 'Restore-AzSqlDatabase' to omit the high availability (HA) replica count when the parameter is not specified.
* Added selective-fields support to Azure SQL auditing
   - Added the optional 'RequiredFields' parameter to 'Set-AzSqlServerAudit' and 'Set-AzSqlDatabaseAudit'
   - Added 'RequiredFields' to the output of 'Get-AzSqlServerAudit' and 'Get-AzSqlDatabaseAudit'
   - Updated blob auditing operations to API version '2026-08-01-preview'

Az.StorageSync
* Improved help for the 'ChangeEnumerationIntervalDay' parameter
* Fixed 'Set-AzStorageSyncServer' to retrieve the registered server using the validated server ID
* Added 'ChangeEnumerationIntervalDay' parameter to 'New-AzStorageSyncCloudEndpoint' cmdlet
   - Allows customers to configure the interval in days between change enumeration operations for cloud endpoints
   - Optional parameter that provides control over change detection frequency
   - Valid range: 1 to 20 days
* Added 'Set-AzStorageSyncCloudEndpoint' cmdlet
   - Allows customers to update the 'ChangeEnumerationIntervalDay' property of an existing cloud endpoint
   - Valid range: 1 to 20 days

Az.Websites
* Upgraded the Microsoft.Web API version from 2021-01-15 to 2025-05-01. Microsoft.CertificateRegistration and Microsoft.DomainRegistration remain on 2021-01-15.