Update Terraform azurerm to v4.49.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
azurerm (source)	required_provider	minor	4.44.0 -> 4.49.0

---

Release Notes

hashicorp/terraform-provider-azurerm (azurerm)

v4.49.0

Compare Source

FEATURES:

• New Data Source: azurerm_graph_services_account (#​30697)
• New Data Source: azurerm_oracle_exascale_database_storage_vault (#​30043)
• New Resource: azurerm_api_management_workspace_policy_fragment (#​30678)
• New Resource: azurerm_oracle_exascale_database_storage_vault (#​30043)

ENHANCEMENTS:

• Data Source: azurerm_data_protection_backup_vault - add support for the identity.identity_ids property (#​29061)
• azurerm_consumption_budget_management_group - remove the maximum count validation for the notification block (#​29200)
• azurerm_consumption_budget_resource_group - remove the maximum count validation for the notification block (#​29200)
• azurerm_consumption_budget_subscription - remove the maximum count validation for the notification block (#​29200)
• azurerm_data_protection_backup_vault - add support for the identity.identity_ids property (#​29061)
• azurerm_data_protection_backup_vault - add support for UserAssigned and SystemAssigned, UserAssigned values to the identity.type property (#​29061)
• azurerm_monitor_data_collection_rule - improve validation for data_sources.*.name (#​30851)
• azurerm_search_service - support upgrading the sku based on tier (#​30842)
• azurerm_storage_queue - support migrating from storage_account_name to storage_account_id (#​30836)

BUG FIXES:

• azurerm_application_insights - fix an issue that caused tags to be removed when other properties were updated (#​30758)
• azurerm_container_registry - fix the name length validation to allow 50 rather than 49 (#​30858)
• azurerm_function_app_flex_consumption - the auth_settings block contents are now set into state when auth_settings.enabled is set to false (#​30781)
• azurerm_linux_function_app - the auth_settings block contents are now set into state when auth_settings.enabled is set to false (#​30781)
• azurerm_linux_function_app_slot - the auth_settings block contents are now set into state when auth_settings.enabled is set to false (#​30781)
• azurerm_linux_web_app - the auth_settings block contents are now set into state when auth_settings.enabled is set to false (#​30781)
• azurerm_linux_web_app_slot - the auth_settings block contents are now set into state when auth_settings.enabled is set to false (#​30781)
• azurerm_mssql_database - fix validation for min_capacity and auto_pause_delay_in_minutes being set on non-serverless SKUs (#​30856)
• azurerm_signalr_service_custom_certificate - remove unnecessary API requests and checks that could lead to a panic (#​30412)
• azurerm_windows_function_app - the auth_settings block contents are now set into state when auth_settings.enabled is set to false (#​30781)
• azurerm_windows_function_app_slot - the auth_settings block contents are now set into state when auth_settings.enabled is set to false (#​30781)
• azurerm_windows_web_app - the auth_settings block contents are now set into state when auth_settings.enabled is set to false (#​30781)
• azurerm_windows_web_app_slot - the auth_settings block contents are now set into state when auth_settings.enabled is set to false (#​30781)

v4.48.0

Compare Source

FEATURES:

• New Data Source: azurerm_oracle_autonomous_database_clone_from_backup (#​29633)
• New Data Source: azurerm_oracle_autonomous_database_clone_from_database (#​29633)
• New Resource: azurerm_oracle_autonomous_database_clone_from_backup (#​29633)
• New Resource: azurerm_oracle_autonomous_database_clone_from_database (#​29633)

ENHANCEMENTS:

• dependencies: containerapps - update to API version 2025-07-01 (#​30801)
• dependencies: containerservice - update to API version 2025-07-01 (#​30719)
• dependencies: go-azure-sdk - update to v0.20251007.1195632 (#​30799)
• dependencies: guestconfiguration - update to API version 2024-04-05 (#​30642)
• dependencies: search - update to API version 2025-05-01 (#​30314)
• azurerm_kubernetes_cluster - add support for AzureLinux3 and Ubuntu2204 to the default_node_pool.os_sku property (#​30719)
• azurerm_kubernetes_cluster - add support for the ai_toolchain_operator_enabled property (#​30713)
• azurerm_kubernetes_cluster_node_pool - add support for AzureLinux3 and Ubuntu2204 to the os_sku property (#​30719)
• azurerm_linux_virtual_machine_scale_set - add support for the resilient_vm_creation_enabled and resilient_vm_deletion_enabled properties (#​30204)
• azurerm_network_watcher_flow_log - changing the target_resource_id property no longer forces the resource to be replaced (#​30776)
• azurerm_notification_hub_namespace - add support for replication_region and zone_redundancy_enabled (#​30531)
• azurerm_windows_virtual_machine_scale_set - add support for the resilient_vm_creation_enabled and resilient_vm_deletion_enabled properties (#​30204)

BUG FIXES:

• azurerm_eventhub_namespace - maximum_throughput_units can be set to 0 when auto_inflate_enabled is disabled (#​30777)
• azurerm_log_analytics_workspace - fix the default value for local_authentication_enabled (#​30759)
• azurerm_mssql_database - add validation to ensure that min_capacity and auto_pause_delay_in_minutes can only be set on serverless dbs (#​30790)
• azurerm_mssql_server - the azuread_administrator block now updates in place rather than being deleted/recreated (#​30742)
• azurerm_network_watcher_flow_log - the target_resource_id property is now included in the update request payload resolving an issue where changing it failed to recreate or update the resource (#​30776)
• azurerm_pim_eligible_role_assignment - improve filter used during List requests to prevent timeouts (#​30705)
• azurerm_postgresql_flexible_server_virtual_endpoint - fix read error when in replica set in failover state (#​30789)

v4.47.0

Compare Source

FEATURES:

• New Resource: azurerm_api_management_workspace_policy (#​30547)

ENHANCEMENTS:

• dependencies: go-azure-sdk - update to v0.20250924.1155608 (#​30693)
• azurerm_cognitive_account - add support for value AIServices to kind property (#​30423)
• azurerm_cognitive_account - add the project_management_enabled property (#​30423)
• azurerm_cognitive_account - add the network_injection property (#​30423)
• azurerm_palo_alto_local_rulestack_rule - increase limit for priority to 1000000 (#​30712)
• azurerm_stream_analytics_job - add support for the Msi value in the job_storage_account.authentication_mode property (#​30728)

BUG FIXES:

• azurerm_management_group_policy_remediation - suppress casing difference on policy_definition_reference_id to avoid a perpetual diff as the API doesn't honour casing (#​30736)
• azurerm_resource_group_policy_remediation - suppress casing difference on policy_definition_reference_id to avoid a perpetual diff as the API doesn't honour casing (#​30736)
• azurerm_resource_policy_remediation - suppress casing difference on policy_definition_reference_id to avoid a perpetual diff as the API doesn't honour casing (#​30736)
• azurerm_storage_account - fix error that occurs around queue_properties when not specified (#​30746)
• azurerm_subscription_policy_remediation - suppress casing difference on policy_definition_reference_id to avoid a perpetual diff as the API doesn't honour casing (#​30736)

v4.46.0

Compare Source

ENHANCEMENTS:

• dependencies: frontdoor/webapplicationfirewallpolicies - update to API version 2025-03-01 (#​29742)
• azurerm_cdn_frontdoor_firewall_policy - support for the captcha_cookie_expiration_in_minutes property and the CAPTCHA value in the custom_rule.action property (#​29742)
• azurerm_cdn_frontdoor_security_policy - add update ability (#​30299)
• azurerm_cognitive_account - add support for C2, C3, C4, D3, and S1 to sku_name (#​30655)
• azurerm_flex_function_app - add support for the http_concurrency property (#​29678)
• azurerm_kubernetes_cluster - add support for the api_server_access_profile.virtual_network_integration_enabled and api_server_access_profile.subnet_id properties (#​30559)
• azurerm_machine_learning_workspace - add support for the service_side_encryption_enabled property (#​30478)
• azurerm_mysql_flexible_server - add support for the managed_hsm_key_id property (#​30502)
• azurerm_netapp_volume - add support for updating protocols (#​30643)
• azurerm_netapp_volume_group_oracle - add support for updating protocols (#​30643)
• azurerm_netapp_volume_group_sap_hana - add support for updating protocols (#​30643)
• azurerm_postgresql_flexible_server - add support for the 17 value in the version property (#​30683)
• azurerm_storage_queue - add support for the storage_account_id property (#​28752)

BUG FIXES:

• azurerm_cdn_frontdoor_firewall_policy - fix the read function so it now correctly marks the resource as gone (#​30704)

v4.45.1

Compare Source

NOTES:

This release contains a Terraform Plugin SDK v2 version bump that prevents identity change validation from raising an error when prior identity is empty (all attributes are null).

BUG FIXES:

• dependencies: hashicorp/terraform-plugin-sdk/v2 - update to v2.38.1 (#​30667)
• azurerm_network_interface - ensure identity is set during non-refresh apply operations (#​30667)

v4.45.0

Compare Source

FEATURES:

• New Action: azurerm_virtual_machine_power (#​30647)
• New List Resource: azurerm_storage_account (#​30614)
• New List Resource: azurerm_virtual_network (#​30614)

ENHANCEMENTS:

• dependencies: go-azure-sdk - update to v0.20250908.1192604 (#​30644)
• azurerm_kubernetes_cluster - add support for the network_profile.advanced_networking block (#​30434)
• azurerm_storage_account - expiration_action supports Block (#​30599) (#​30599)
• azurerm_subnet - add support for sharing_scope (#​30600)

---

Configuration

📅 Schedule: Branch creation - "after 7am and before 11am every weekday" in timezone Europe/London, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[hmcts-jenkins-a-to-c]

Plan Result (aat)

No changes. Your infrastructure matches the configuration.

[hmcts-jenkins-a-to-c]

Plan Result (prod)

No changes. Your infrastructure matches the configuration.