Az

Author(s)

• Microsoft Corporation

Tags

Azure ARM ResourceManager Linux AzureAutomationNotSupported

PSEditions

Core Desktop

Dependencies

• • Az.Accounts (>= 5.5.4)
  • Az.Advisor (= 3.0.0)
  • Az.Aks (= 7.2.1)
  • Az.AnalysisServices (= 1.3.0)
  • Az.ApiManagement (= 4.2.1)
  • Az.App (= 2.0.1)
  • Az.AppConfiguration (= 2.2.0)
  • Az.ApplicationInsights (= 3.0.0)
  • Az.ArcResourceBridge (= 2.0.0)
  • Az.Attestation (= 3.1.0)
  • Az.Automanage (= 2.0.0)
  • Az.Automation (= 1.12.1)
  • Az.Batch (= 4.1.1)
  • Az.Billing (= 2.3.0)
  • Az.Cdn (= 6.3.0)
  • Az.CloudService (= 3.0.0)
  • Az.CognitiveServices (= 1.17.1)
  • Az.Compute (= 11.11.0)
  • Az.ConfidentialLedger (= 2.0.0)
  • Az.ConnectedMachine (= 1.2.0)
  • Az.ContainerInstance (= 5.1.0)
  • Az.ContainerRegistry (= 5.2.0)
  • Az.CosmosDB (= 1.22.0)
  • Az.DataBoxEdge (= 1.3.0)
  • Az.Databricks (= 2.0.0)
  • Az.DataFactory (= 1.20.2)
  • Az.DataLakeAnalytics (= 1.2.0)
  • Az.DataLakeStore (= 1.6.0)
  • Az.DataMigration (= 1.1.1)
  • Az.DataProtection (= 3.1.1)
  • Az.DataShare (= 1.2.0)
  • Az.DataTransfer (= 1.0.0)
  • Az.DesktopVirtualization (= 6.0.0)
  • Az.DevCenter (= 3.0.0)
  • Az.DeviceRegistry (= 1.0.0)
  • Az.DevTestLabs (= 1.2.0)
  • Az.Discovery (= 1.0.0)
  • Az.Dns (= 2.2.0)
  • Az.DnsResolver (= 2.0.0)
  • Az.EdgeAction (= 1.0.0)
  • Az.ElasticSan (= 1.7.0)
  • Az.EventGrid (= 2.3.0)
  • Az.EventHub (= 5.8.0)
  • Az.Fabric (= 1.0.0)
  • Az.FileShare (= 1.0.0)
  • Az.FirmwareAnalysis (= 1.0.0)
  • Az.FrontDoor (= 2.3.0)
  • Az.Functions (= 5.0.1)
  • Az.HDInsight (= 6.5.0)
  • Az.HealthcareApis (= 3.0.0)
  • Az.HealthDataAIServices (= 1.0.0)
  • Az.IotHub (= 2.9.2)
  • Az.KeyVault (= 6.6.2)
  • Az.Kusto (= 3.1.0)
  • Az.LoadTesting (= 2.0.0)
  • Az.LogicApp (= 1.7.0)
  • Az.MachineLearning (= 1.3.0)
  • Az.MachineLearningServices (= 2.0.0)
  • Az.Maintenance (= 1.7.1)
  • Az.ManagedServiceIdentity (= 2.1.0)
  • Az.ManagedServices (= 4.0.0)
  • Az.Marketplace (= 1.0.0)
  • Az.MarketplaceOrdering (= 2.2.0)
  • Az.Migrate (= 3.2.0)
  • Az.Mission (= 1.0.0)
  • Az.Monitor (= 8.1.0)
  • Az.MySql (= 2.0.0)
  • Az.NetAppFiles (= 1.4.1)
  • Az.Network (= 8.4.0)
  • Az.NetworkCloud (= 3.0.0)
  • Az.Nginx (= 2.0.0)
  • Az.NotificationHubs (= 1.3.0)
  • Az.OperationalInsights (= 3.4.1)
  • Az.Oracle (= 2.0.0)
  • Az.PolicyInsights (= 2.0.0)
  • Az.PowerBIEmbedded (= 2.2.0)
  • Az.PrivateDns (= 1.3.0)
  • Az.RecoveryServices (= 7.16.0)
  • Az.RedisCache (= 1.12.0)
  • Az.RedisEnterpriseCache (= 2.0.0)
  • Az.Relay (= 3.1.0)
  • Az.ResourceGraph (= 1.3.0)
  • Az.ResourceMover (= 2.0.0)
  • Az.Resources (= 10.2.2)
  • Az.Security (= 1.10.0)
  • Az.SecurityInsights (= 4.0.0)
  • Az.ServiceBus (= 4.4.1)
  • Az.ServiceFabric (= 5.2.0)
  • Az.SignalR (= 3.0.0)
  • Az.Sql (= 7.3.0)
  • Az.SqlVirtualMachine (= 3.0.0)
  • Az.StackHCI (= 3.0.0)
  • Az.StackHCIVM (= 2.0.0)
  • Az.Storage (= 9.7.2)
  • Az.StorageAction (= 2.0.0)
  • Az.StorageDiscovery (= 1.0.0)
  • Az.StorageMover (= 2.2.0)
  • Az.StorageSync (= 2.7.1)
  • Az.StreamAnalytics (= 3.0.0)
  • Az.Support (= 2.1.0)
  • Az.Synapse (= 3.3.0)
  • Az.TrafficManager (= 1.6.0)
  • Az.Websites (= 4.3.0)
  • Az.Workloads (= 2.0.0)

Release Notes

16.5.0 - November 2026
Az.Accounts
* Fixed 'Get-AzAccessToken -ResourceUrl' help; replaced Azure AD Graph with Microsoft Graph.
* Clarified 'Add-AzEnvironment'/'Set-AzEnvironment -AzureKeyVaultDnsSuffix' format.
* Fixed login terminology.

Az.ApiManagement
* Removed non-public endpoints from the 'Get-AzApiManagementNetworkStatus' example.

Az.Cdn
* Updated Front Door to API 2026-10-01; added server TLS (Transport Layer Security) groups, post-quantum key exchange, origin certificate name validation and EdgeAction 'ClientResponse'. Preserved existing features/URL signing compatibility.
* Kept classic CDN on API 2026-04-01-preview and standalone EdgeAction on 2024-07-22-preview. Use Az.EdgeAction for the stable API.
* Fixed Change Safety parameter forwarding.
* Announced standalone EdgeAction removal in Az.Cdn 7.0.0/Az 17.0.0 on November 15, 2026; no behavior changes/warnings yet. Delivery-rule actions and URL signing are unaffected.
* Added classic Front Door/Microsoft CDN migration cutover guidance.

Az.Compute
* Added preview FlexProfile support with 'PreferredVMSize' for virtual machine creation and updates, and FlexProfile details in 'Get-AzVM' model output. Requires feature registration and regional availability.
* Added soft delete policy controls to Azure Compute Gallery cmdlets, along with recycle-bin discovery and image version restore cmdlets. Permanent deletion can be requested with '-BypassSoftDelete'.
* Updated Azure Compute Gallery cmdlets to use API version 2026-03-03.
* Updated Azure Compute cmdlets with two new features from API version 2026-04-01.
* Added Compute Gallery soft delete policies, recycle-bin discovery and image version restore; '-BypassSoftDelete' permanently deletes.
* Updated Gallery to API 2026-03-03 and added two Compute features from API 2026-04-01.

Az.ConnectedMachine
* Updated to API 2026-06-16-preview.
* Added 'Get-AzConnectedExtensionPublisher', 'Get-AzConnectedExtensionType' and 'Get-AzConnectedExtensionMetadataV2'.
* Changed run command 'RunAsPassword' from 'String' to 'SecureString'.
* Removed identity properties 'OSType' and 'MetadataName', and private link scope properties 'SystemData*'.

Az.DataProtection
* Added Cosmos DB item-level restore to 'New-AzDataProtectionRestoreConfigurationClientObject' and 'Initialize-AzDataProtectionRestoreRequest'; select databases or database/container pairs with '-ResourceIdentifier'.
* Fixed 'Initialize-AzDataProtectionRestoreRequest' with '-UseSystemAssignedIdentity' or '-UserAssignedIdentityArmId'.

Az.EdgeAction
* General availability for module Az.EdgeAction
* Updated parameters; documented tag replacement, JSON-based clearing and immutable properties.
* Tag updates preserve the default version; switch with 'Switch-AzEdgeActionVersionDefault'.
* Clarified subscriptions for code retrieval/default-version switching.

Az.EventHub
* Updated default API to 2026-07-01-preview.
* Added Fabric shortcuts: 'Get-AzEventHubFabricShortcut', 'New-AzEventHubFabricShortcut', 'Remove-AzEventHubFabricShortcut', 'Approve-AzEventHubFabricShortcut' and 'Invoke-AzEventHubRejectFabricShortcut'.
* Added 'Get-AzEventHubUpgradePreferencesOperation' and 'New-AzEventHubUpgradePreferencesOperation'.

Az.KeyVault
* Upgraded the Key Vault control plane API version to '2026-05-15'.
   - Added Managed HSM SKU values to 'New-AzKeyVaultManagedHsm'.
* Fixed name availability and managed hardware security module region cmdlets with API 2026-02-01.

Az.Marketplace
* Made Az.Marketplace generally available.

Az.Migrate
* Added 'TargetVMSecurityOption' (Standard/TrustedLaunch) and 'EnableSecureBoot' to 'New-AzMigrateLocalServerReplication' and 'Set-AzMigrateLocalServerReplication'. Trusted Launch enables Secure Boot and virtual Trusted Platform Module (vTPM). Trusted Launch/Secure Boot require Generation 2 targets.
* Blocked disabling source-enabled Secure Boot; skipped checks if source state is unknown.
* Changed 'Initialize-AzMigrateLocalReplicationInfrastructure' cache grants to Storage Account Contributor (was Contributor) for the vault identity/source/target appliance applications.

Az.Network
* Updated replication vault Private Link to API 2026-05-01 and Network SDK to 2026-03-01/2026-01-01.
* Added 'CapacityProviderId' to 'New-AzVirtualNetworkAppliance' and 'Update-AzVirtualNetworkAppliance'.
* Added ExpressRoute link aggregation group (LAG) authorization/key cmdlets.
* Added managed Network Virtual Appliance IPv6/dual-stack via 'AddressFamily' (IPv4 default on creation; unchanged if omitted on update). Added read-only family, IPv6 prefix/private address output and interface public/private IPv6 addresses.
* Added DDoS (Distributed Denial of Service) custom policy TCP/UDP mitigation rule management, IP prefix/geographic Deny/Permit matches and policy integration [Azure/azure-rest-api-specs#46716](https://github.com/Azure/azure-rest-api-specs/pull/46716).
* Added 'New-AzVirtualNetworkApplianceCapability', 'Get-AzVirtualNetworkApplianceCapability' and 'Remove-AzVirtualNetworkApplianceCapability'.
* Added 'Get-AzDdosCustomPolicyDetectionRule' and 'Set-AzDdosCustomPolicyDetectionRule' for API 2025-07-01 [#29387].
* Expanded Change Safety support and fixed parameter forwarding.
* Added provider-led ExpressRoute cross-connection migration and circuits on 'ExpressRouteLag'.
* Added First Party Service Tag associations to 'New-AzPublicIpPrefix'.
* Added 'MigrateGatewayForPointToSiteProfile'; fixed 'New-AzVirtualNetworkGatewayMigrationParameter -MigrationType'.
* Added Application Gateway advanced routing/rule type 'AdvancedRouting'.
* Added mutual TLS (Transport Layer Security) 'VerifyClientAuthMode' to 'New-AzApplicationGatewayClientAuthConfiguration' and 'Set-AzApplicationGatewayClientAuthConfiguration'.
* Fixed 'New-AzVirtualHubVnetConnection -EnableOnlyIpv6Peering' boolean conversion.
* Added IPAM (IP Address Management) pool size bounds to creation/updates/output.
* Added 'Get-AzExpressRouteCircuitAuthorizationKey' and 'Get-AzExpressRoutePortAuthorizationKey'.
* Added Application Gateway WAF (Web Application Firewall) rule set display name/paranoia level output and CAPTCHA.
* Added 'SourceGeoLocation' and 'DestinationGeoLocation' to 'New-AzFirewallPolicyNetworkRule'.
* Removed 'FormatVersion' validation from 'New-AzNetworkWatcherFlowLog' and 'Set-AzNetworkWatcherFlowLog'.

Az.RecoveryServices
* Supported SQL instance snapshot backup features.
* Stopped Backup cmdlets overriding session-wide HTTPS certificate validation.

Az.Relay
* Updated to API 2026-07-01-preview.
* Added dedicated clusters: 'Get-AzRelayCluster', 'New-AzRelayCluster', 'Set-AzRelayCluster', 'Remove-AzRelayCluster', 'Get-AzRelayClusterNamespace', 'Get-AzRelayClusterSku' and 'Get-AzRelayClusterAvailableClusterRegion'.
* Allowed 'Set-AzRelayCluster' tag/capacity updates without 'Location'/'SkuCapacity'.
* Added 'ClusterArmId'/'MinimumTlsVersion' to 'New-AzRelayNamespace'/'Update-AzRelayNamespace'.
* Fixed 'Update-AzRelayNamespace' async Accepted responses.

Az.Resources
* Expanded deployment stack What-If create/delete details, including potential changes; removed redundant headers and aligned JSON formatting with Azure CLI [Azure/azure-cli#34156](https://github.com/Azure/azure-cli/pull/34156).
* Updated 'Microsoft.Extensions.Caching.Memory' from 2.2.0 to 10.0.3.

Az.ServiceBus
* Updated default API to 2026-07-01-preview.

Az.Sql
* Added 'LockImmutability'/'ImmutabilityStatus' to 'Set-AzSqlDatabaseBackupShortTermRetentionPolicy' and 'Set-AzSqlInstanceDatabaseBackupShortTermRetentionPolicy'. Locking requires live Managed Instance databases and irreversible-action confirmation ('-Force' skips).
* Added Managed Instance long-term immutability to 'Set-AzSqlInstanceDatabaseBackupLongTermRetentionPolicy' and policy/backup output.
* Added 'Lock-AzSqlInstanceDatabaseLongTermRetentionBackupImmutability' and 'Remove-AzSqlInstanceDatabaseLongTermRetentionBackupImmutability' for time-based immutability.
* Added legal holds via 'Set-AzSqlInstanceDatabaseLongTermRetentionBackupLegalHold' and 'Remove-AzSqlInstanceDatabaseLongTermRetentionBackupLegalHold'.

Az.StorageMover
* Updated to API 2026-05-01.
* Added 'Invoke-AzStorageMoverReconcileJobDefinition' for active runs.
* Added cross-tenant transfers: 'EnableCrossTenantTransfer'/'AllowedStorageAccount' on blob/SMB (Server Message Block) endpoints; 'IsCrossTenantJob', 'CrossTenantEndpointTenantId'/'CrossTenantEndpointResourceId' on 'New-AzStorageMoverJobDefinition'.
* Added endpoint 'EndpointKind', NFS (Network File System) 'NFSv4_1', and 'SourceType' FSX-EFS (NFS)/FSX-SMB (SMB).
* Added hourly 'ScheduleRepeatInterval', 'SyncMode'/'MoverSyncedUntil' to job creation/updates and job type 'OnPremToCloudAgentLess'.

Az.StorageSync
* Preserved 'Set-AzStorageSyncServer' identity token errors and added server-specific guidance.
* Added 'ServerId' to the help example and documented elevated sessions for Azure Arc-enabled servers.

Az.TrafficManager
* Added 'New-AzTrafficManagerProfile -RecordType' (A, AAAA or CNAME), returned by profile get/create/set cmdlets [#29711].
* Updated to API 2026-09-01.

Az.Websites
* Added 'AsyncScalingEnabled' to 'New-AzAppServicePlan' and 'Set-AzAppServicePlan' to enable or disable asynchronous scaling for dedicated App Service plans
* Added Managed Instance identities, scripts, mounts, registry adapters, networking and Remote Desktop Protocol (RDP) to 'New-AzAppServicePlan'/'Set-AzAppServicePlan'.
* Added 'Get-AzAppServicePlanManagedInstance' (worker IPs/status), 'Restart-AzAppServicePlanManagedInstance' (recycling) and 'Get-AzAppServicePlanRdpCredential' (secure RDP credentials).
* Removed unsupported 'New-AzStaticWebApp' identity/JSON sets.