v6.2.0

What's Changed

Policy refresh from upstream and a number of minor fixes - see #1201

• Fix broken wiki links for custom connectivity options by @robsissons-contino in #1127
• feat: november 2024 release by @matt-FFFFFF in #1201

New Contributors

• @robsissons-contino made their first contribution in #1127

Full Changelog: v6.1.0...v6.2.0

v6.1.0

What's Changed

Please see the milestone: https://github.com/Azure/terraform-azurerm-caf-enterprise-scale/milestone/13?closed=1

• docs: update docs with FAQ on roadmap and banner for upcoming breaking changes by @matt-FFFFFF in #1008
• feat: add new management config to docu by @steph409 in #1010
• fix(management): azapi_resource.diag_settings by @Laudenlaruto in #1027
• Fix dcr custom config by @jaredfholgate in #1037
• update files for MR by @cshea-msft in #1062
• Removed SCM privatelink since it breaks DNS resolution by @egnirra in #1097
• test: pin max azurerm to 3.116.0 by @matt-FFFFFF in #1114
• Update _Sidebar.md by @jtracey93 in #1110
• Remove faulting property location from azapi_resource by @SvenAelterman in #1053
• feat: sixDotOne by @matt-FFFFFF in #1115

New Contributors

• @cshea-msft made their first contribution in #1062
• @egnirra made their first contribution in #1097
• @SvenAelterman made their first contribution in #1053

Full Changelog: v6.0.0...v6.1.0

v6.0.0

Overview/Summary

This will be in the next major release, following the update of Azure Landing Zones with it's major policy refresh and move to Azure Monitoring Agent from Microsoft Monitoring Agent.

See the AMA blog.

Incorporates the following changes from upstream

1. Policy refresh H2 FY24
2. AMA Updates

Changes from our awesome community

1. #918 (thanks @chrsundermann!)
2. #925 (thanks @nyanhp!)
3. #952 (thanks @Keetika-Yogendra!)

‼️ Breaking Changes

1. Minimum AzureRM provider version now 3.107.0
2. Minimum AzAPI provider version now 1.13.1
3. Minimum Terraform version now 1.7.0
4. Minimum AzAPI verison now 1.13.1
5. var.configure_management_resources schema change, removing legacy components and adding support for AMA resources

Upgrade guide

https://github.com/Azure/terraform-azurerm-caf-enterprise-scale/wiki/%5BUser-Guide%5D-Upgrade-from-v5.2.1-to-v6.0.0

Acknowledgements

Thanks to:

• @JamesDLD for providing a helpful contribution for the DCRs
• @jaredfholgate for the policy sync process work and code review
• @arjenhuitema for his awesome work on the AMA design
• @Springstone for an awesome policy refresh effort
• @jtracey93 for his technical assurance and oversight

v5.2.1

Patch Release

This patch release includes an update to resolve the bug raised in #794.

What's Changed

The issue relates to the managed identity created as part of policy assignment deploy-private-dns-zones not having adequate permissions to add/update Host A records within the private DNS zone in the connectivity subscription. This change adds a role assignment for the policy MI principal ID with Private DNS Zone Contributor to the connectivity management group.

• updates to resolve issue #794 by @ATuckwell in #919

New Contributors

@ATuckwell made their first contribution in #919

Full Changelog: v5.2.0...v5.2.1

v5.2.0

Minor version release

This release is a minor version release.

Breaking Changes

Since pushing this release we discovered a breaking change for some users. The threat_intelligence_allowlist variable has change from list to map type. The default empty value in our examples should now be {}. If you are using this variable, you will need to update to the new data structure.

More details here: https://github.com/Azure/terraform-azurerm-caf-enterprise-scale/wiki/%5BUser-Guide%5D-Upgrade-from-v5.1.0-to-v5.2.0

What's Changed

• chore(deps): bump golang.org/x/crypto from 0.14.0 to 0.17.0 in /tests/terratest by @dependabot in #899
• fix: threat_intelligence_allowlist by @matt-FFFFFF in #907
• fix(outputs): set Log Analytics workspaces and Automation Accounts as senstive outputs by @Laudenlaruto in #901
• Add support for user managed identity for policy assignments (re-submission) by @LaurentLesle in #867
• fix: updating Private DNS Zone resource ID from dnszones to dnsZones by @tobiasehlert in #910
• feat(connectivity): Add option to set allow_non_virtual_wan_traffic in express route gateway. by @Slapper in #914

New Contributors

• @Laudenlaruto made their first contribution in #901
• @tobiasehlert made their first contribution in #910
• @Slapper made their first contribution in #914

Full Changelog: v5.1.0...v5.2.0

v5.1.0

What's Changed

• feat(connectivity): custom Settings for Virtual Hub connection names by @birdnathan in #885

New Contributors

• @birdnathan made their first contribution in #885

Full Changelog: v5.0.3...v5.1.0

v5.0.3

What's Changed

• Fix routing intent deployment issue in virtual wan by @LaurentLesle in #870

Full Changelog: v5.0.2...v5.0.3

v5.0.2

What's Changed

• Fix: DNS Proxy Removal on FW whilst Upgrading by @luke-taylor in #859

Full Changelog: v5.0.1...v5.0.2

v5.0.1

What's Changed

• fix: #855 by @matt-FFFFFF in #857

Full Changelog: v5.0.0...v5.0.1

v5.0.0

Breaking changes

Strict subscription association no longer default

We have changed the default from true to false to better work with subscription vending.

Please see the module upgrade guide for more detail on this breaking change:
https://github.com/Azure/terraform-azurerm-caf-enterprise-scale/wiki/%5BUser-Guide%5D-Upgrade-from-v4.2.0-to-v5.0.0

What's Changed

• Docs: Fix documentation for recent policy updates by @jaredfholgate in #798
• Update Library Templates (automated) by @cae-pr-creator in #799
• Update ALZ Repo (Terraform) with Entra product names by @lachaves in #805
• docs: fix policy enforcement override example by @jaredfholgate in #808
• Bump actions/checkout from 3 to 4 by @dependabot in #807
• Bump tibdex/github-app-token from 1 to 2 by @dependabot in #813
• Add Routing Intent by @luke-taylor in #822
• Add Italy North and avoid casing issues by @jaredfholgate in #834
• Add support for user managed identity for policy assignments by @LaurentLesle in #806
• fix: revert user-assigned managed identity by @matt-FFFFFF in #844
• feat: strict subs no longer default by @matt-FFFFFF in #836
• Update dynamic overrides section for in and not_in by @MISO-mgriffin in #840
• fix: bug-vpn_client_config by @gogondi1 in #835
• Update Library Templates (automated) by @cae-pr-creator in #827
• Remove Basic SKU requirement on AzureFirewallManagementSubnet by @ryan-royals in #845
• Update Library Templates (automated) by @cae-pr-creator in #846

New Contributors

• @LaurentLesle made their first contribution in #806
• @MISO-mgriffin made their first contribution in #840
• @ryan-royals made their first contribution in #845
• @gogondi1 made their first contribution in #835

Full Changelog: v4.2.0...v5.0.0