NewYour coding agent can read the release notes before it upgrades.Set up the MCP server →
NuGet · #2656 most downloaded on NuGet
A native Pulumi package for creating and managing Azure resources.
Last release 28 days ago
14 Sep 2026
Ships fairly regularly
a new release about every 3 weeks
Rarely documented
notes for 11 of the last 60 stable releases
Nothing withdrawn
no release was ever pulled
6 years old
269 releases · first in 2021
One column per quarter.
Fix sql.ServerVulnerabilityAssessment existence check #1050.
dataprotection.ResourceGuardpowerbi.PowerBIResourcepowerbi.PrivateEndpointConnectionsql.DatabaseAdvisorsql.ServerAdvisordataprotection.getResourceGuardpowerbi.getPrivateEndpointConnectionsql.getDatabaseAdvisorsql.getServerAdvisorsql.ServerVulnerabilityAssessment existence check
#1050.pulumi/pulumi dependencies to 3.10.3Input<object> to objectnetwork.listEffectiveSecurityUserRuleBySubnet was removed
(source)Remove validation of properties with type any #1058.
network.listActiveConnectivityConfiguration
network.listActiveConnectivityConfigurationnetwork.listActiveSecurityAdminRulenetwork.listActiveSecurityUserRulenetwork.listEffectiveConnectivityConfigurationnetwork.listEffectiveSecurityUserRuleBySubnetnetwork.listNetworkManagerEffectiveSecurityAdminRulenetwork.listEffectiveConfiguration, network.listActiveConfiguration,
network.listEffectiveConfigurationBySubnet were removed in favor of the functions listed
in "New functions" above
(source)Version 2020-08-06-preview of the security module is deprecated, all resource removed (source)
iotsecurity.LocationSiteiotsecurity.SiteSensoriotsecurity.getLocationSiteiotsecurity.getSiteSensorUpdates Authorization::RoleAssignment to force replace on principalId or scope change #771
fluidrelay.FluidRelayServerhealthcareapis.DicomServicehealthcareapis.FhirServicehealthcareapis.IotConnectorhealthcareapis.IotConnectorFhirDestinationhealthcareapis.Workspacefluidrelay.getFluidRelayServerfluidrelay.getFluidRelayServerKeyshealthcareapis.getDicomServicehealthcareapis.getFhirServicehealthcareapis.getIotConnectorhealthcareapis.getIotConnectorFhirDestinationhealthcareapis.getWorkspaceauthorization.ResourceManagementPrivateLink
authorization.ResourceManagementPrivateLinksecurityinsights.Anomaliesauthorization.getResourceManagementPrivateLinksecurityinsights.getAnomaliescompute.CapacityReservationGroup
compute.CapacityReservationcompute.CapacityReservationGroupnetwork.NetworkSecurityPerimetercompute.getCapacityReservationcompute.getCapacityReservationGroupdbformysql.getGetPrivateDnsZoneSuffixExecutenetwork.getNetworkSecurityPerimeterA number of breaking changes in edgeorder module (preview API version) (source)
synapse.AttachedDatabaseConfigurationsynapse.getAttachedDatabaseConfigurationsynapse.listKustoPoolFollowerDatabasessynapse.listKustoPoolLanguageExtensionsedgeorder module (preview API version)
(source)elastic resources and functions updated from 2020-07-01-preview to 2020-07-01features.SubscriptionFeatureRegistration
features.SubscriptionFeatureRegistrationpeering.ConnectionMonitorTestfeatures.getSubscriptionFeatureRegistrationpeering.getConnectionMonitorTestnetwork.VirtualWan
#942.iotspaces resource provider was removed
(source)datafactory changed the type for avroCompressionCodec and orcCompressionCodec (source)
azurestackhci.ArcSettingazurestackhci.Extensionazurestackhci.getArcSettingazurestackhci.getExtension…the securityinsights module. New API contains no breaking changes.
desktopvirtualization.SessionHostConfigurationdesktopvirtualization.getSessionHostConfigurationeventgrid.getEventSubscriptionDeliveryAttributeseventgrid.getPartnerTopicEventSubscriptionDeliveryAttributeseventgrid.getSystemTopicEventSubscriptionDeliveryAttributessecurityinsights.IncidentComment and securityinsights.IncidentRelation promoted
from 2019-01-01-preview to 2021-03-01-preview to unify with other resources of
the securityinsights module. New API contains no breaking changes.batchai resource provider was deprecated and removed
(source)operationalinsights.listWorkspaceKeys - this function was deprecated on the Azure side, and the API doesn't work anymore. Use operationalinsights.getS…
databricks.PrivateEndpointConnectionapimanagement.getUserSharedAccessTokendatabricks.getPrivateEndpointConnectioninsights.getDiagnosticServiceTokenReadOnlyinsights.getDiagnosticServiceTokenReadWriteinsights.getLiveTokenmachinelearningservices.getOnlineEndpointTokenmigrate.getProjectKeysnotificationhubs.getNotificationHubPnsCredentialsoperationalinsights.getSharedKeysrecoveryservices.getRecoveryPointAccessTokenstorsimple.getManagerDevicePublicEncryptionKeyoperationalinsights.listWorkspaceKeys - this function was deprecated on
the Azure side, and the API doesn't work anymore. Use operationalinsights.getSharedKeys
instead. See #882.azurearcdata.SqlManagedInstance
azurearcdata.DataControllerazurearcdata.PostgresInstanceazurearcdata.SqlManagedInstanceazurearcdata.SqlServerInstanceazurearcdata.getDataControllerazurearcdata.getPostgresInstanceazurearcdata.getSqlManagedInstanceazurearcdata.getSqlServerInstancemarketplace:PrivateStoreCollection
marketplace:PrivateStoreCollectionmarketplace:PrivateStoreCollectionOfferpowerplatform:Accountsecurityinsights:ActivityCustomEntityQuerysecurityinsights:EntityQuerytestbase:CustomerEventmarketplace:getPrivateStoreCollectionmarketplace:getPrivateStoreCollectionOfferpowerplatform:getAccountsecurityinsights:getActivityCustomEntityQuerysecurityinsights:getEntityQuerytestbase:getCustomerEventbotservice.PrivateEndpointConnection
botservice.PrivateEndpointConnectiondocumentdb.Serviceinsights.DataCollectionEndpointmachinelearningservices.BatchDeploymentmachinelearningservices.BatchEndpointmachinelearningservices.CodeContainermachinelearningservices.CodeVersionmachinelearningservices.DataContainermachinelearningservices.DataVersionmachinelearningservices.EnvironmentContainermachinelearningservices.EnvironmentSpecificationVersionmachinelearningservices.Jobmachinelearningservices.ModelContainermachinelearningservices.ModelVersionmachinelearningservices.OnlineDeploymentmachinelearningservices.OnlineEndpointsecurityinsights.Metadatasecurityinsights.SourceControlsql.OutboundFirewallRulebotservice.getPrivateEndpointConnectiondocumentdb.getServiceinsights.getDataCollectionEndpointmachinelearningservices.getBatchDeploymentmachinelearningservices.getBatchEndpointmachinelearningservices.getCodeContainermachinelearningservices.getCodeVersionmachinelearningservices.getDataContainermachinelearningservices.getDataVersionmachinelearningservices.getEnvironmentContainermachinelearningservices.getEnvironmentSpecificationVersionmachinelearningservices.getJobmachinelearningservices.getModelContainermachinelearningservices.getModelVersionmachinelearningservices.getOnlineDeploymentmachinelearningservices.getOnlineDeploymentLogsmachinelearningservices.getOnlineEndpointmachinelearningservices.listBatchEndpointKeysmachinelearningservices.listDatastoreSecretsmachinelearningservices.listOnlineEndpointKeyssecurityinsights.getMetadatasecurityinsights.getSourceControlsecurityinsights.listSourceControlRepositoriessql.getOutboundFirewallRuleAzure now indicates that the version 2021-01-01-preview of servicebus.PrivateEndpointConnection isn't supported yet, so we switched it to the older su
web.KubeEnvironmentlogz.listMonitorUserRoleslogz.listMonitorVMHostslogz.listSubAccountVMHostsweb.getKubeEnvironment2021-01-01-preview of servicebus.PrivateEndpointConnection
isn't supported yet, so we switched it to the older supported version 2018-01-01-previewThe following resources are now deprecated in favor of their specialized variants listed above.
avs.CloudLinkavs.ScriptExecutionavs.WorkloadNetworkPublicIPblueprint.PolicyAssignmentArtifactblueprint.RoleAssignmentArtifactblueprint.TemplateArtifactdataboxedge.ArcAddondataboxedge.CloudEdgeManagementRoledataboxedge.FileEventTriggerdataboxedge.IoTAddondataboxedge.IoTRoledataboxedge.KubernetesRoledataboxedge.MECRoledataboxedge.PeriodicTimerEventTriggerdatashare.ADLSGen1FileDataSetdatashare.ADLSGen1FolderDataSetdatashare.ADLSGen2FileDataSetdatashare.ADLSGen2FileDataSetMappingdatashare.ADLSGen2FileSystemDataSetdatashare.ADLSGen2FileSystemDataSetMappingdatashare.ADLSGen2FolderDataSetdatashare.ADLSGen2FolderDataSetMappingdatashare.BlobContainerDataSetdatashare.BlobContainerDataSetMappingdatashare.BlobDataSetdatashare.BlobDataSetMappingdatashare.BlobFolderDataSetdatashare.BlobFolderDataSetMappingdatashare.KustoClusterDataSetdatashare.KustoClusterDataSetMappingdatashare.KustoDatabaseDataSetdatashare.KustoDatabaseDataSetMappingdatashare.ScheduledSynchronizationSettingdatashare.ScheduledTriggerdatashare.SqlDBTableDataSetdatashare.SqlDBTableDataSetMappingdatashare.SqlDWTableDataSetdatashare.SqlDWTableDataSetMappingdatashare.SynapseWorkspaceSqlPoolTableDataSetdatashare.SynapseWorkspaceSqlPoolTableDataSetMappingkusto.EventGridDataConnectionkusto.EventHubDataConnectionkusto.IotHubDataConnectionkusto.ReadOnlyFollowingDatabasekusto.ReadWriteDatabasemachinelearningservices.ACIServicemachinelearningservices.AKSServicemachinelearningservices.EndpointVariantnetwork.DefaultAdminRulenetwork.DefaultUserRuleresources.AzureCliScriptresources.AzurePowerShellScriptsecurity.IngestionSettingsecurityinsights.AADDataConnectorsecurityinsights.AATPDataConnectorsecurityinsights.ASCDataConnectorsecurityinsights.AwsCloudTrailDataConnectorsecurityinsights.EntityAnalyticssecurityinsights.EyesOnsecurityinsights.FusionAlertRulesecurityinsights.MCASDataConnectorsecurityinsights.MDATPDataConnectorsecurityinsights.MicrosoftSecurityIncidentCreationAlertRulesecurityinsights.OfficeDataConnectorsecurityinsights.ScheduledAlertRulesecurityinsights.TIDataConnectorsecurityinsights.Uebasynapse.EventGridDataConnectionsynapse.EventHubDataConnectionsynapse.IotHubDataConnectionsynapse.ReadWriteDatabasetimeseriesinsights.EventHubEventSourcetimeseriesinsights.Gen1Environmenttimeseriesinsights.Gen2Environmenttimeseriesinsights.IoTHubEventSourceavs.getCloudLinkavs.getScriptExecutionavs.getScriptExecutionLogsavs.getWorkloadNetworkPublicIPblueprint.getPolicyAssignmentArtifactblueprint.getRoleAssignmentArtifactblueprint.getTemplateArtifactdataboxedge.getArcAddondataboxedge.getCloudEdgeManagementRoledataboxedge.getFileEventTriggerdataboxedge.getIoTAddondataboxedge.getIoTRoledataboxedge.getKubernetesRoledataboxedge.getMECRoledataboxedge.getPeriodicTimerEventTriggerdatashare.getADLSGen1FileDataSetdatashare.getADLSGen1FolderDataSetdatashare.getADLSGen2FileDataSetdatashare.getADLSGen2FileDataSetMappingdatashare.getADLSGen2FileSystemDataSetdatashare.getADLSGen2FileSystemDataSetMappingdatashare.getADLSGen2FolderDataSetdatashare.getADLSGen2FolderDataSetMappingdatashare.getBlobContainerDataSetdatashare.getBlobContainerDataSetMappingdatashare.getBlobDataSetdatashare.getBlobDataSetMappingdatashare.getBlobFolderDataSetdatashare.getBlobFolderDataSetMappingdatashare.getKustoClusterDataSetdatashare.getKustoClusterDataSetMappingdatashare.getKustoDatabaseDataSetdatashare.getKustoDatabaseDataSetMappingdatashare.getScheduledSynchronizationSettingdatashare.getScheduledTriggerdatashare.getSqlDBTableDataSetdatashare.getSqlDBTableDataSetMappingdatashare.getSqlDWTableDataSetdatashare.getSqlDWTableDataSetMappingdatashare.getSynapseWorkspaceSqlPoolTableDataSetdatashare.getSynapseWorkspaceSqlPoolTableDataSetMappingkusto.getEventGridDataConnectionkusto.getEventHubDataConnectionkusto.getIotHubDataConnectionkusto.getReadOnlyFollowingDatabasekusto.getReadWriteDatabasemachinelearningservices.getACIServicemachinelearningservices.getAKSServicemachinelearningservices.getEndpointVariantnetwork.getDefaultAdminRulenetwork.getDefaultUserRuleresources.getAzureCliScriptresources.getAzurePowerShellScriptsecurity.getIngestionSettingsecurity.listIngestionSettingConnectionStringssecurity.listIngestionSettingTokenssecurityinsights.getAADDataConnectorsecurityinsights.getAATPDataConnectorsecurityinsights.getASCDataConnectorsecurityinsights.getAwsCloudTrailDataConnectorsecurityinsights.getEntityAnalyticssecurityinsights.getEyesOnsecurityinsights.getFusionAlertRulesecurityinsights.getMCASDataConnectorsecurityinsights.getMDATPDataConnectorsecurityinsights.getMicrosoftSecurityIncidentCreationAlertRulesecurityinsights.getOfficeDataConnectorsecurityinsights.getScheduledAlertRulesecurityinsights.getTIDataConnectorsecurityinsights.getUebasynapse.getEventGridDataConnectionsynapse.getEventHubDataConnectionsynapse.getIotHubDataConnectionsynapse.getReadWriteDatabasetimeseriesinsights.getEventHubEventSourcetimeseriesinsights.getGen1Environmenttimeseriesinsights.getGen2Environmenttimeseriesinsights.getIoTHubEventSourceThe following resources are now deprecated in favor of their specialized variants listed above.
blueprint.Artifactdataboxedge.Addondataboxedge.Roledataboxedge.Triggerdatashare.DataSetdatashare.DataSetMappingdatashare.SynchronizationSettingdatashare.Triggerkusto.DataConnectionkusto.Databasemachinelearningservices.MachineLearningServicenetwork.AdminRulenetwork.UserRuleresources.DeploymentScriptsecurityinsights.AlertRulesecurityinsights.DataConnectorsecurityinsights.ProductSettingsynapse.DataConnectionsynapse.Databasetimeseriesinsights.Environmenttimeseriesinsights.EventSourcesql resource provider renamed the type ResourceIdentityWithUserAssignedIdentities to ResourceIdentity
(source)Add support for authentication against private and hybrid cloud environments. #831
compute:RestorePointcompute:RestorePointCollectiondesktopvirtualization:PrivateEndpointConnectionByHostPooldesktopvirtualization:PrivateEndpointConnectionByWorkspacenetwork:VirtualNetworkGatewayNatRulecompute:getRestorePointcompute:getRestorePointCollectiondesktopvirtualization:getPrivateEndpointConnectionByHostPooldesktopvirtualization:getPrivateEndpointConnectionByWorkspacenetwork:getVirtualNetworkGatewayNatRulecompute:VirtualMachine, compute:VirtualMachineExtension, compute:VirtualMachineRunCommandByVirtualMachine,
compute:VirtualMachineScaleSet, compute:VirtualMachineScaleSetExtension, compute:VirtualMachineScaleSetVM,
compute:VirtualMachineScaleSetVMExtension, compute:VirtualMachineScaleSetVMRunCommand are upgraded from version
2020-12-01 to 2021-03-01 to enable RestorePoint and RestorePointCollection resourcesappplatform version 2021-03-03-preview is renamed to 2021-06-01-preview
(source)operationalinsights.Workspace reshaped the features property
(source)datafactory resources were changed from enums to unstructured dictionaries
(source)botservice removed the cognitiveServicesSubscriptionId property from DirectLineSpeechChannelProperties
(source)devtestlab:ScheduleCreationParameter's location property is now read-only
(source)agfoodplatform.getFarmBeatsModel
agfoodplatform.Extensionagfoodplatform.FarmBeatsModelagfoodplatform.getExtensionagfoodplatform.getFarmBeatsModelsecurityinsights.SentinelOnboardingState
synapse.DatabasePrincipalAssignment
synapse.DatabasePrincipalAssignmentsynapse.KustoPoolPrincipalAssignmentsynapse.getDatabasePrincipalAssignmentsynapse.getKustoPoolPrincipalAssignmentbatchai.FileServer resource is deprecated (source)
dbforpostgresql.ServerSecurityAlertPolicy
#788New module for Video Analyzer management:
videoanalyzer:AccessPolicyvideoanalyzer:EdgeModulevideoanalyzer:Videovideoanalyzer:VideoAnalyzerNew module for Test Base management:
testbase.TestBaseAccounttestbase.Packagetestbase.FavoriteProcesselastic.listVMHostNew module for Video Analyzer management:
videoanalyzer.getAccessPolicyvideoanalyzer.getEdgeModulevideoanalyzer.getVideovideoanalyzer.getVideoAnalyzervideoanalyzer.listEdgeModuleProvisioningTokenvideoanalyzer.listVideoStreamingTokenNew module for Test Base management:
testbase.getTestResultDownloadURLtestbase.getTestBaseAccountFileUploadUrltestbase.getTestResultVideoDownloadURLtestbase.getPackageDownloadURLtestbase.getTestBaseAccounttestbase.getPackagetestbase.getFavoriteProcessbatchai.FileServer resource is deprecated (source)insights has reconciled two separate types MyManagedIdentity and MyWorkbookManagedIdentity into the single type
MyWorkbookManagedIdentity. They represent the same thing but had different name by a mistake in design.
(source)maxCapacityReservationLevel output property was removed from operationalinsights.WorkspaceSkuResponse
(source)security.AssessmentMetadataInSubscription fixed the property name, changing from category to categories
(source)dbforpostgresql.v20200214preview.Configuration - PostgreSQL Flexible Server Configuration (preview) #711
dbforpostgresql.v20200214preview.Configuration - PostgreSQL Flexible Server Configuration (preview)
#711Fix SDK regression for .NET, Python and Typescript introduced in #pulumi/6686 #pulumi/6811
The native Azure provider for Pulumi is now generally available.
The native Azure provider for Pulumi is now generally available.
All */latest modules are now removed. They have been deprecated since 0.7.0. If you are migrating from earlier versions, first upgrade to 0.8.0, repla…
*/latest modules are now removed. They have been deprecated since 0.7.0. If you are migrating
from earlier versions, first upgrade to 0.8.0, replace all resources from latest modules with their
counterparts in top-level unnamed modules, apply the change with pulumi up, and then upgrade to 0.9.0+.
#712network.RecordSet is split into network.PrivateRecordSet (private DNS)
and network.RecordSet (public DNS).
#583sql.BackupShortTermRetentionPolicy, sql.DatabaseBlobAuditingPolicy,
sql.ExtendedDatabaseBlobAuditingPolicy, sql.ExtendedServerBlobAuditingPolicy,
sql.LongTermRetentionPolicy, sql.ServerBlobAuditingPolicy, sql.ServerSecurityAlertPolicy.
#7252019-06-01-preview version for the containerregistry.Task resource
#736Updated all top-level resources to the latest API versions.
apimanagement:TenantPolicy, consumption:BudgetByResourceGroupName, containerregistry:BuildStep,
containerservice:ContainerService, costmanagement:Budget, costmanagement:ReportConfig,
costmanagement:ReportConfigByResourceGroupName, datamigration:ServiceTask, synapse:SqlDatabase,
web:CertificateCsr, web:SiteInstanceDeployment, web:SiteInstanceDeploymentSlot.sql.DataMaskingPolicy.
#605storage.EncryptionSource.
#637insights.ProactiveDetectionConfiguration.
#704Endpoint and CustomDomain resources are auto-named with a random suffix.
#629Fixed the aliases for smooth migration from azure-nextgen to azure-native.
Fixed the aliases for smooth migration from azure-nextgen to azure-native.
If a later version is published by Microsoft and it contains breaking changes, we will NOT introduce this version to the top-level resource. It will b…
See the announcement in the official Pulumi blog.
Top-Level Resources (#169):
new Pulumi.AzureNextGen.Storage.StorageAccount("sa", ...);
// or
new azure_nextgen.storage.StorageAccount("sa", ...);
Resources that have preview versions but no stable versions are also available in the top module (they were not in Latest).
At 1.0, for a given resource, we will likely pick an API version that is the latest. If a later version is published by Microsoft and it contains breaking changes, we will NOT introduce this version to the top-level resource. It will be available under a versioned namespace only.
At 2.0, whenever it comes, we will bring all those postponed breaking changes by promoting top-level resources to their respective latest API versions.
We will encourage everyone to use top-level modules unless they have a reason not to do so (e.g., they need a newer version with its new features).
All "Latest" modules/namespaces become deprecated and will be removed before 1.0. You will be able to migrate to top-level resources without re-creating Azure resources.
Note: storage.Blob and storage.StorageAccountStaticWebsite are top-level resources only, their latest counterpart has been removed.
Auto-naming is applied for properties that are the last path parameters in their API endpoint path.
There is a twist compared to the normal Pulumi auto-naming:
Example:
const resourceGroup = new resources.ResourceGroup("rg");
// the actual resource would be named e.g. "rg8a43bc22"
const blob = new storage.Blob("wwwroot", {
resourceGroupName: resourceGroup.name,
accountName: storageAccount.name,
containerName: storageContainer.name,
source: new pulumi.asset.FileArchive("wwwroot"),
});
// blob name is simply "wwwroot"
web.WebApplicationSettings renamed to web.WebAppApplicationSettings (#282)authorization.GetClientConfig, authorization.GetClientToken, Storage.Blob, Storage.StorageAccountStaticWebsite were removed from
corresponding latest modules and are only available in the top-level modulesYour coding agent can read these notes before it upgrades. Set up the MCP server →