Az

Author(s)

• Microsoft Corporation

Tags

Azure ARM ResourceManager Linux AzureAutomationNotSupported

PSEditions

Core Desktop

Dependencies

• • Az.Accounts (>= 5.4.0)
  • Az.Advisor (= 3.0.0)
  • Az.Aks (= 7.1.2)
  • Az.AnalysisServices (= 1.2.0)
  • Az.ApiManagement (= 4.1.0)
  • Az.App (= 2.0.1)
  • Az.AppConfiguration (= 2.1.0)
  • Az.ApplicationInsights (= 3.0.0)
  • Az.ArcResourceBridge (= 2.0.0)
  • Az.ArizeAI (= 1.0.0)
  • Az.Attestation (= 3.0.0)
  • Az.Automanage (= 2.0.0)
  • Az.Automation (= 1.11.2)
  • Az.Batch (= 4.0.1)
  • Az.Billing (= 2.2.0)
  • Az.Cdn (= 6.0.2)
  • Az.CloudService (= 2.1.2)
  • Az.CognitiveServices (= 1.16.0)
  • Az.Compute (= 11.5.0)
  • Az.ConfidentialLedger (= 2.0.0)
  • Az.ConnectedMachine (= 1.1.1)
  • Az.ContainerInstance (= 4.1.3)
  • Az.ContainerRegistry (= 5.0.1)
  • Az.CosmosDB (= 1.20.0)
  • Az.DataBoxEdge (= 1.2.1)
  • Az.Databricks (= 1.11.1)
  • Az.DataFactory (= 1.19.7)
  • Az.DataLakeAnalytics (= 1.1.0)
  • Az.DataLakeStore (= 1.5.2)
  • Az.DataMigration (= 1.0.0)
  • Az.DataProtection (= 2.10.0)
  • Az.DataShare (= 1.1.1)
  • Az.DataTransfer (= 1.0.0)
  • Az.DesktopVirtualization (= 5.4.7)
  • Az.DevCenter (= 3.0.0)
  • Az.DeviceRegistry (= 1.0.0)
  • Az.DevTestLabs (= 1.1.0)
  • Az.Dns (= 2.0.0)
  • Az.DnsResolver (= 1.2.4)
  • Az.ElasticSan (= 1.7.0)
  • Az.EventGrid (= 2.2.0)
  • Az.EventHub (= 5.4.0)
  • Az.Fabric (= 1.0.0)
  • Az.FirmwareAnalysis (= 1.0.0)
  • Az.FrontDoor (= 2.1.0)
  • Az.Functions (= 4.3.2)
  • Az.HDInsight (= 6.4.0)
  • Az.HealthcareApis (= 3.0.0)
  • Az.HealthDataAIServices (= 1.0.0)
  • Az.IotHub (= 2.8.1)
  • Az.KeyVault (= 6.4.3)
  • Az.Kusto (= 2.4.0)
  • Az.LambdaTest (= 1.0.0)
  • Az.LoadTesting (= 1.1.1)
  • Az.LogicApp (= 1.6.0)
  • Az.MachineLearning (= 1.2.0)
  • Az.MachineLearningServices (= 1.3.0)
  • Az.Maintenance (= 1.5.1)
  • Az.ManagedServiceIdentity (= 2.0.0)
  • Az.ManagedServices (= 3.1.3)
  • Az.MarketplaceOrdering (= 2.2.0)
  • Az.Migrate (= 2.12.1)
  • Az.Monitor (= 7.0.0)
  • Az.MySql (= 1.5.2)
  • Az.NetAppFiles (= 1.2.0)
  • Az.Network (= 7.27.0)
  • Az.NetworkCloud (= 2.0.0)
  • Az.Nginx (= 2.0.0)
  • Az.NotificationHubs (= 1.2.0)
  • Az.OperationalInsights (= 3.3.0)
  • Az.Oracle (= 2.0.0)
  • Az.PolicyInsights (= 1.7.4)
  • Az.PostgreSql (= 1.4.1)
  • Az.PowerBIEmbedded (= 2.1.0)
  • Az.PrivateDns (= 1.2.0)
  • Az.RecoveryServices (= 7.11.2)
  • Az.RedisCache (= 1.11.0)
  • Az.RedisEnterpriseCache (= 1.6.1)
  • Az.Relay (= 3.0.0)
  • Az.ResourceGraph (= 1.2.1)
  • Az.ResourceMover (= 1.3.2)
  • Az.Resources (= 9.1.0)
  • Az.Security (= 1.8.0)
  • Az.SecurityInsights (= 3.2.2)
  • Az.ServiceBus (= 4.1.1)
  • Az.ServiceFabric (= 5.1.0)
  • Az.SignalR (= 2.3.3)
  • Az.Sql (= 6.4.2)
  • Az.SqlVirtualMachine (= 2.4.1)
  • Az.StackHCI (= 2.7.1)
  • Az.StackHCIVM (= 1.1.1)
  • Az.Storage (= 9.6.1)
  • Az.StorageAction (= 1.0.1)
  • Az.StorageDiscovery (= 1.0.0)
  • Az.StorageMover (= 2.0.0)
  • Az.StorageSync (= 2.5.2)
  • Az.StreamAnalytics (= 3.0.0)
  • Az.Support (= 2.1.0)
  • Az.Synapse (= 3.2.4)
  • Az.TrafficManager (= 1.3.0)
  • Az.Websites (= 3.4.3)
  • Az.Workloads (= 2.0.0)

Release Notes

15.6.0 - May 2026
Az.Accounts
* Updated the 'System.Memory' dependency to v4.6.3 to support the Storage SDK update.
* Added 'AzureAppConfigurationEndpointSuffix' and 'AzureAppConfigurationEndpointResourceId' to 'Add-AzEnvironment' and 'Set-AzEnvironment'
   - Users can now configure Azure App Configuration endpoints when adding or updating custom environments

Az.Aks
* Set 'useAADAuth' to 'true' by default in the omsagent addon profile when enabling the Monitoring addon via 'Enable-AzAksAddOn' and 'New-AzAksCluster'
   - This ensures compatibility with the latest Azure Monitor agent which requires AAD authentication

Az.AppConfiguration
* Upgraded API version from 2022-05-01 to 2024-06-01
* Added support for App Configuration store replicas
   - Added 'New-AzAppConfigurationReplica'
   - Added 'Get-AzAppConfigurationReplica'
   - Added 'Remove-AzAppConfigurationReplica'
* Added 'DataPlaneProxyAuthenticationMode', 'DataPlaneProxyPrivateLinkDelegation', and 'DefaultKeyValueRevisionRetentionPeriodInSecond' to 'New-AzAppConfigurationStore' and 'Update-AzAppConfigurationStore'
* Removed 'SoftDeleteRetentionInDay' from 'Update-AzAppConfigurationStore' as it is a create-only property
* Added data plane snapshot cmdlets for Azure App Configuration
   - Added 'New-AzAppConfigurationSnapshot'
   - Added 'Get-AzAppConfigurationSnapshot'
   - Added 'Update-AzAppConfigurationSnapshot'
   - Added 'Test-AzAppConfigurationSnapshot'
* Added 'Snapshot' to 'Get-AzAppConfigurationKeyValue' to support retrieving key-values by snapshot name
* Added 'Get-AzAppConfigurationOperationDetail' to retrieve data plane operation details

Az.Cdn
* Announced upcoming breaking changes for all 'Az*CdnEdgeAction*' cmdlets and the 'SubjectAlternativeName' parameter of 'New-AzCdnSecretCustomerCertificateParametersObject', which will be removed in a future release.

Az.Compute
* Added '-Feature' parameter to 'Update-AzGalleryImageDefinition' to allow updating existing gallery image features (such as DiskControllerTypes, SecurityType, IsAcceleratedNetwork, and IsHibernate). Each feature supports a 'StartsAtVersion' property to specify the minimum gallery image version that supports the updated feature.
* Added '-AllowUpdateImage' parameter to 'Update-AzGalleryImageDefinition'. Must be set to true when using the '-Feature' parameter to update gallery image features.
* Added managed identity support for Azure Compute Galleries
   - 'New-AzGallery': Added '-EnableSystemAssignedIdentity' and '-UserAssignedIdentity' to assign managed identities at creation time
   - 'Update-AzGallery': Added '-EnableSystemAssignedIdentity' and '-UserAssignedIdentity' to add managed identities to an existing gallery. '-UserAssignedIdentity' appends to existing identities
   - 'Update-AzGallery': Added '-DisableSystemAssignedIdentity' to remove system-assigned managed identity
   - 'Update-AzGallery': Added '-RemoveUserAssignedIdentity' accepting a list of identity resource IDs to remove specific user-assigned identities, or 'All' to remove all user-assigned identities
   - 'Get-AzGallery': Now returns managed identity details in the 'Identity' property
* Compute ComputeRP related cmdlets will now use 2025-11-01 version of the ComputeRP API.

Az.Databricks
* Added breaking change announcement for 'Update-AzDatabricksVNetPeering': parameters 'AllowForwardedTraffic', 'AllowGatewayTransit', 'AllowVirtualNetworkAccess' and 'UseRemoteGateway' will change from Boolean to SwitchParameter

Az.DataProtection
* Added auto-protection support for Blob and ADLS (Azure Data Lake Storage) backup in 'New-AzDataProtectionBackupConfigurationClientObject'
   - Added '-AutoProtection' switch parameter to enable auto-protection
   - Added '-AutoProtectionExclusionRule' parameter to specify exclusion rules for auto-protection
* Updated API version from 2025-09-01 to 2026-03-01

Az.DesktopVirtualization
* Added preannouncement for breaking changes in Az.DesktopVirtualization 6.0.0
   - Parameter 'Tag' will be removed from the Update cmdlet of Application and Desktop.

Az.DnsResolver
* Fixed misleading breaking change warning on 'New-AzDnsResolverDomainList' that incorrectly stated the cmdlet was being deprecated
   - The cmdlet displayed 'The cmdlet is being deprecated. There will be no replacement for it.' when the intent was only to announce that the 'Domain' parameter is no longer mandatory
   - 'New-AzDnsResolverDomainList' are now able to create domain lists without domains.

Az.Migrate
* Fixed bugs in 'Initialize-AzMigrateLocalReplicationInfrastructure'
 - Added early Azure login validation with a clear error message when user is not logged in
 - Removed unnecessary caller identity resolution
 - Added cache storage account validations to reject unsupported SKU tiers and disabled public network access
* Updated 'New-AzMigrateLocalServerReplication'
 - Added storage path health validation before initiating replication

Az.NetAppFiles
* Updated to API version 2026-01-01
* Added new cmdlets for the Buckets resource (alias 'Anf*' for Azure NetApp Files):
   - 'Get-AzNetAppFilesBucket'
   - 'New-AzNetAppFilesBucket'
   - 'Update-AzNetAppFilesBucket'
   - 'Remove-AzNetAppFilesBucket'
   - 'New-AzNetAppFilesBucketCredential'
   - 'Set-AzNetAppFilesBucketAkvCredential'
   - 'Update-AzNetAppFilesBucketCertificate'
* Added new cmdlets for the Caches resource (alias 'Anf*' for Azure NetApp Files):
   - 'Get-AzNetAppFilesCache'
   - 'New-AzNetAppFilesCache'
   - 'Update-AzNetAppFilesCache'
   - 'Remove-AzNetAppFilesCache'
   - 'Get-AzNetAppFilesCachePeeringPassphrase'
   - 'Set-AzNetAppFilesCachePool'
   - 'Reset-AzNetAppFilesCacheSmbPassword'
* 'Start-AzNetAppFilesPeerExternalCluster' now returns the cluster peering command and passphrase as a 'PSClusterPeerCommandResponse' (was previously discarded)
* Surfaced new replication properties on 'PSNetAppFilesReplicationObject' ('(Get-AzNetAppFilesVolume).DataProtection.Replication'):
   - 'ExternalReplicationSetupStatus', 'ExternalReplicationSetupInfo' - external replication setup state machine + next-step guidance
   - 'MirrorState', 'RelationshipStatus' - current mirror state and transfer status

Az.Network
* Added support to associate a DDoS custom policy with a Load Balancer frontend IP configuration.
   - Added the '-DdosCustomPolicyId' parameter to 'New-AzLoadBalancerFrontendIpConfig', 'Add-AzLoadBalancerFrontendIpConfig', and 'Set-AzLoadBalancerFrontendIpConfig'.
   - Added the '-RemoveDdosCustomPolicy' switch to 'Set-AzLoadBalancerFrontendIpConfig'.

Az.PolicyInsights
* Added Breaking Change notifications to many of the cmdlets in Az.PolicyInsights.

Az.PostgreSql
* 'Az.PostgreSql' will be retired in an upcoming release.
   - To continue managing Azure Database for PostgreSQL resources, move to 'Az.PostgreSqlFlexibleServer'.
   - When the replacement module is released, it will be available to install from https://www.powershellgallery.com/packages/Az.PostgreSqlFlexibleServer

Az.ResourceMover
* Updated preannouncement breaking changes date to May 2026.

Az.Resources
* Made 'Remove-AzDenyAssignment' honor '-Confirm:False' and idempotent when no matching deny assignment exists. The redundant '-Force' switch was removed (the cmdlet relies on the standard 'SupportsShouldProcess'/'ConfirmImpact' pattern).
* Improved error messages for role assignment and role definition operations to include the underlying service error code and message instead of just the HTTP status code. [#19605] [#19374]
* Added '-PrincipalId' and '-PrincipalType' to 'New-AzDenyAssignment' to support per-principal deny assignments targeting a specific User or ServicePrincipal, in addition to the existing Everyone mode.
* Added 'New-AzDenyAssignment' for creating user-assigned deny assignments using the '2024-07-01-preview' API. Deny assignments allow denying specific write, delete, and action operations to all principals at a given scope while excluding specified principals.
* Added 'Remove-AzDenyAssignment' for removing user-assigned deny assignments by ID, name and scope, or pipeline input.
* Regenerated Authorization Management SDK from '2024-07-01-preview' swagger specification to include deny assignment create and delete operations.
* Fixed 'New-AzDeployment' not reporting nested ARM (Azure Resource Manager) error details (e.g. 'KeyVaultParameterReferenceSecretRetrieveFailed') when a 'MultipleErrorsOccurred' validation failure is returned. Previously, the inner errors were silently dropped and only the generic top-level error was shown. [#28308]

Az.SecurityInsights
* Updated preannouncement breaking changes date to May 2026.

Az.Sql
* Fixed error handling in Az.Sql cmdlets that inherit from 'AzureSqlCmdletBase' to surface descriptive error messages instead of generic 'Operation returned an invalid status code' when API calls fail. This restores meaningful error details such as Azure Policy violation messages.

Az.StackHCI
* Fixed single node registration scenario.

Az.Storage
* Removed breaking change warnings for TLS 1.0 and TLS 1.1 deprecation
   - 'New-AzStorageAccount'
   - 'Set-AzStorageAccount'
* Updated MinimumTlsVersion parameter description to note that TLS 1.3 is not yet supported
   - 'New-AzStorageAccount'
   - 'Set-AzStorageAccount'

Az.Websites
* Updated preannouncement breaking changes date to May 2026.