Az 15.6.0

Gallery Module for Azure PowerShell: https://www.powershellgallery.com/packages/Az/15.6.0

To install Az from the PowerShell Gallery, run the following command:

Install-Module -Name Az -Repository PSGallery -Force

To update from an older version of Az, run the following command:

Update-Module -Name Az

Docker images

• mcr.microsoft.com/azure-powershell:latest
• mcr.microsoft.com/azure-powershell:alpine-3.23
• mcr.microsoft.com/azure-powershell:15.6.0-alpine-3.23
• mcr.microsoft.com/azure-powershell:debian-12
• mcr.microsoft.com/azure-powershell:15.6.0-debian-12
• mcr.microsoft.com/azure-powershell:azurelinux-3.0
• mcr.microsoft.com/azure-powershell:15.6.0-azurelinux-3.0
• mcr.microsoft.com/azure-powershell:azurelinux-3.0-arm64
• mcr.microsoft.com/azure-powershell:15.6.0-azurelinux-3.0-arm64
• mcr.microsoft.com/azure-powershell:ubuntu-24.04
• mcr.microsoft.com/azure-powershell:15.6.0-ubuntu-24.04

Release Notes

15.6.0 - May 2026

Az.Accounts 5.4.0

• Updated the 'System.Memory' dependency to v4.6.3 to support the Storage SDK update.
• Added 'AzureAppConfigurationEndpointSuffix' and 'AzureAppConfigurationEndpointResourceId' to 'Add-AzEnvironment' and 'Set-AzEnvironment'
  • Users can now configure Azure App Configuration endpoints when adding or updating custom environments

Az.Aks 7.1.2

• Set 'useAADAuth' to 'true' by default in the omsagent addon profile when enabling the Monitoring addon via 'Enable-AzAksAddOn' and 'New-AzAksCluster'
  • This ensures compatibility with the latest Azure Monitor agent which requires AAD authentication

Az.AppConfiguration 2.1.0

• Upgraded API version from 2022-05-01 to 2024-06-01
• Added support for App Configuration store replicas
  • Added 'New-AzAppConfigurationReplica'
  • Added 'Get-AzAppConfigurationReplica'
  • Added 'Remove-AzAppConfigurationReplica'
• Added 'DataPlaneProxyAuthenticationMode', 'DataPlaneProxyPrivateLinkDelegation', and 'DefaultKeyValueRevisionRetentionPeriodInSecond' to 'New-AzAppConfigurationStore' and 'Update-AzAppConfigurationStore'
• Removed 'SoftDeleteRetentionInDay' from 'Update-AzAppConfigurationStore' as it is a create-only property
• Added data plane snapshot cmdlets for Azure App Configuration
  • Added 'New-AzAppConfigurationSnapshot'
  • Added 'Get-AzAppConfigurationSnapshot'
  • Added 'Update-AzAppConfigurationSnapshot'
  • Added 'Test-AzAppConfigurationSnapshot'
• Added 'Snapshot' to 'Get-AzAppConfigurationKeyValue' to support retrieving key-values by snapshot name
• Added 'Get-AzAppConfigurationOperationDetail' to retrieve data plane operation details

Az.Cdn 6.0.2

• Announced upcoming breaking changes for all 'AzCdnEdgeAction' cmdlets and the 'SubjectAlternativeName' parameter of 'New-AzCdnSecretCustomerCertificateParametersObject', which will be removed in a future release.

Az.Compute 11.5.0

• Added '-Feature' parameter to 'Update-AzGalleryImageDefinition' to allow updating existing gallery image features (such as DiskControllerTypes, SecurityType, IsAcceleratedNetwork, and IsHibernate). Each feature supports a 'StartsAtVersion' property to specify the minimum gallery image version that supports the updated feature.
• Added '-AllowUpdateImage' parameter to 'Update-AzGalleryImageDefinition'. Must be set to true when using the '-Feature' parameter to update gallery image features.
• Added managed identity support for Azure Compute Galleries
  • 'New-AzGallery': Added '-EnableSystemAssignedIdentity' and '-UserAssignedIdentity' to assign managed identities at creation time
  • 'Update-AzGallery': Added '-EnableSystemAssignedIdentity' and '-UserAssignedIdentity' to add managed identities to an existing gallery. '-UserAssignedIdentity' appends to existing identities
  • 'Update-AzGallery': Added '-DisableSystemAssignedIdentity' to remove system-assigned managed identity
  • 'Update-AzGallery': Added '-RemoveUserAssignedIdentity' accepting a list of identity resource IDs to remove specific user-assigned identities, or 'All' to remove all user-assigned identities
  • 'Get-AzGallery': Now returns managed identity details in the 'Identity' property
• Compute ComputeRP related cmdlets will now use 2025-11-01 version of the ComputeRP API.

Az.Databricks 1.11.1

• Added breaking change announcement for 'Update-AzDatabricksVNetPeering': parameters 'AllowForwardedTraffic', 'AllowGatewayTransit', 'AllowVirtualNetworkAccess' and 'UseRemoteGateway' will change from Boolean to SwitchParameter

Az.DataProtection 2.10.0

• Added auto-protection support for Blob and ADLS (Azure Data Lake Storage) backup in 'New-AzDataProtectionBackupConfigurationClientObject'
  • Added '-AutoProtection' switch parameter to enable auto-protection
  • Added '-AutoProtectionExclusionRule' parameter to specify exclusion rules for auto-protection
• Updated API version from 2025-09-01 to 2026-03-01

Az.DesktopVirtualization 5.4.7

• Added preannouncement for breaking changes in Az.DesktopVirtualization 6.0.0
  • Parameter 'Tag' will be removed from the Update cmdlet of Application and Desktop.

Az.DnsResolver 1.2.4

• Fixed misleading breaking change warning on 'New-AzDnsResolverDomainList' that incorrectly stated the cmdlet was being deprecated
  • The cmdlet displayed 'The cmdlet is being deprecated. There will be no replacement for it.' when the intent was only to announce that the 'Domain' parameter is no longer mandatory
  • 'New-AzDnsResolverDomainList' are now able to create domain lists without domains.

Az.Migrate 2.12.1

• Fixed bugs in 'Initialize-AzMigrateLocalReplicationInfrastructure'
  • Added early Azure login validation with a clear error message when user is not logged in
  • Removed unnecessary caller identity resolution
  • Added cache storage account validations to reject unsupported SKU tiers and disabled public network access
• Updated 'New-AzMigrateLocalServerReplication'
  • Added storage path health validation before initiating replication

Az.NetAppFiles 1.2.0

• Updated to API version 2026-01-01
• Added new cmdlets for the Buckets resource (alias 'Anf*' for Azure NetApp Files):
  • 'Get-AzNetAppFilesBucket'
  • 'New-AzNetAppFilesBucket'
  • 'Update-AzNetAppFilesBucket'
  • 'Remove-AzNetAppFilesBucket'
  • 'New-AzNetAppFilesBucketCredential'
  • 'Set-AzNetAppFilesBucketAkvCredential'
  • 'Update-AzNetAppFilesBucketCertificate'
• Added new cmdlets for the Caches resource (alias 'Anf*' for Azure NetApp Files):
  • 'Get-AzNetAppFilesCache'
  • 'New-AzNetAppFilesCache'
  • 'Update-AzNetAppFilesCache'
  • 'Remove-AzNetAppFilesCache'
  • 'Get-AzNetAppFilesCachePeeringPassphrase'
  • 'Set-AzNetAppFilesCachePool'
  • 'Reset-AzNetAppFilesCacheSmbPassword'
• 'Start-AzNetAppFilesPeerExternalCluster' now returns the cluster peering command and passphrase as a 'PSClusterPeerCommandResponse' (was previously discarded)
• Surfaced new replication properties on 'PSNetAppFilesReplicationObject' ('(Get-AzNetAppFilesVolume).DataProtection.Replication'):
  • 'ExternalReplicationSetupStatus', 'ExternalReplicationSetupInfo' - external replication setup state machine + next-step guidance
  • 'MirrorState', 'RelationshipStatus' - current mirror state and transfer status

Az.Network 7.27.0

• Added support to associate a DDoS custom policy with a Load Balancer frontend IP configuration.
  • Added the '-DdosCustomPolicyId' parameter to 'New-AzLoadBalancerFrontendIpConfig', 'Add-AzLoadBalancerFrontendIpConfig', and 'Set-AzLoadBalancerFrontendIpConfig'.
  • Added the '-RemoveDdosCustomPolicy' switch to 'Set-AzLoadBalancerFrontendIpConfig'.

Az.PolicyInsights 1.7.4

• Added Breaking Change notifications to many of the cmdlets in Az.PolicyInsights.

Az.PostgreSql 1.4.1

• 'Az.PostgreSql' will be retired in an upcoming release.
  • To continue managing Azure Database for PostgreSQL resources, move to 'Az.PostgreSqlFlexibleServer'.
  • When the replacement module is released, it will be available to install from https://www.powershellgallery.com/packages/Az.PostgreSqlFlexibleServer

Az.ResourceMover 1.3.2

• Updated preannouncement breaking changes date to May 2026.

Az.Resources 9.1.0

• Made 'Remove-AzDenyAssignment' honor '-Confirm:False' and idempotent when no matching deny assignment exists. The redundant '-Force' switch was removed (the cmdlet relies on the standard 'SupportsShouldProcess'/'ConfirmImpact' pattern).
• Improved error messages for role assignment and role definition operations to include the underlying service error code and message instead of just the HTTP status code. [#19605] [#19374]
• Added '-PrincipalId' and '-PrincipalType' to 'New-AzDenyAssignment' to support per-principal deny assignments targeting a specific User or ServicePrincipal, in addition to the existing Everyone mode.
• Added 'New-AzDenyAssignment' for creating user-assigned deny assignments using the '2024-07-01-preview' API. Deny assignments allow denying specific write, delete, and action operations to all principals at a given scope while excluding specified principals.
• Added 'Remove-AzDenyAssignment' for removing user-assigned deny assignments by ID, name and scope, or pipeline input.
• Regenerated Authorization Management SDK from '2024-07-01-preview' swagger specification to include deny assignment create and delete operations.
• Fixed 'New-AzDeployment' not reporting nested ARM (Azure Resource Manager) error details (e.g. 'KeyVaultParameterReferenceSecretRetrieveFailed') when a 'MultipleErrorsOccurred' validation failure is returned. Previously, the inner errors were silently dropped and only the generic top-level error was shown. [#28308]

Az.SecurityInsights 3.2.2

• Updated preannouncement breaking changes date to May 2026.

Az.Sql 6.4.2

• ...

Az.StackHCI v2.7.1

https://www.powershellgallery.com/packages/Az.StackHCI/2.7.1

• Fixed single node registration scenario.

Az.DeviceRegistry v1.0.2-preview

https://www.powershellgallery.com/packages/Az.DeviceRegistry/1.0.2-preview

• Preview release of API version 2026-03-01-preview for Az.DeviceRegistry. New cmdlets include:

Az.StackHCI v2.7.0

https://www.powershellgallery.com/packages/Az.StackHCI/2.7.0

• Updated preannouncement breaking changes date to May 2026.

Az.DesktopVirtualization v5.4.6-preview

https://www.powershellgallery.com/packages/Az.DesktopVirtualization/5.4.6-preview

• Upgrade API version to 2026-01-01-preview

Az 15.5.0

Gallery Module for Azure PowerShell: https://www.powershellgallery.com/packages/Az/15.5.0

To install Az from the PowerShell Gallery, run the following command:

Install-Module -Name Az -Repository PSGallery -Force

To update from an older version of Az, run the following command:

Update-Module -Name Az

Docker images

• mcr.microsoft.com/azure-powershell:latest
• mcr.microsoft.com/azure-powershell:alpine-3.21
• mcr.microsoft.com/azure-powershell:15.5.0-alpine-3.21
• mcr.microsoft.com/azure-powershell:alpine-3.22
• mcr.microsoft.com/azure-powershell:15.5.0-alpine-3.22
• mcr.microsoft.com/azure-powershell:debian-12
• mcr.microsoft.com/azure-powershell:15.5.0-debian-12
• mcr.microsoft.com/azure-powershell:azurelinux-3.0
• mcr.microsoft.com/azure-powershell:15.5.0-azurelinux-3.0
• mcr.microsoft.com/azure-powershell:azurelinux-3.0-arm64
• mcr.microsoft.com/azure-powershell:15.5.0-azurelinux-3.0-arm64
• mcr.microsoft.com/azure-powershell:ubuntu-24.04
• mcr.microsoft.com/azure-powershell:15.5.0-ubuntu-24.04

Release Notes

Az.Accounts 5.3.4

• Improved SSH certificate authentication for Az SSH cmdlets across all Azure clouds.
  • SSH certificate authentication now works across all Azure clouds without configuring the '-SshAuthScope' parameter.
  • The '-SshAuthScope' parameter in 'Set-AzEnvironment' and 'Add-AzEnvironment' does not take any effect.
• Updated MSAL to 4.83.1 for bug fixes in IMDS endpoint cache.

Az.Cdn 6.0.1

• Bug fix for #29231

Az.CloudService 2.1.2

• Update the deprecated-by-azversion and change-effective-date of breaking change announcements.

Az.ContainerInstance 4.1.3

• Update the deprecated-by-azversion and change-effective-date of breaking change announcements.

Az.CosmosDB 1.20.0

• Added '-DisableLocalAuth' parameter to 'New-AzCosmosDBAccount' and 'Update-AzCosmosDBAccount' to opt out of local authentication.
• Added '-Capabilities' parameter to 'Update-AzCosmosDBAccount' to allow adding or removing account capabilities.

Az.DataProtection 2.9.1

• Preannounced breaking changes. Please refer to https://go.microsoft.com/fwlink/?linkid=2333229

Az.DnsResolver 1.2.3

• Added announcement for upcoming breaking changes as part of the 2025-10-01-preview API migration:
  • Removed parameter 'ActionBlockResponseCode' from 'New-AzDnsResolverPolicyDnsSecurityRule' and 'Update-AzDnsResolverPolicyDnsSecurityRule'. The block response code is no longer configurable.
  • Parameter 'DnsResolverDomainList' is no longer mandatory on 'New-AzDnsResolverPolicyDnsSecurityRule'. DNS security rules will support managed domain lists as an alternative to user-defined domain lists.
  • Parameter 'Domain' is no longer mandatory on 'New-AzDnsResolverDomainList'. Domain lists will support bulk upload via the new cmdlet 'Invoke-AzDnsResolverBulkDnsResolverDomainList', which will be introduced in the upcoming release.

Az.Functions 4.3.2

• Preannounced breaking changes. Please refer to https://go.microsoft.com/fwlink/?linkid=2333229
• Fixed an issue where New-AzFunctionApp fails due to duplicate -Name parameter binding. [#29166]

Az.ManagedServices 3.1.3

• Update the deprecated-by-azversion and change-effective-date of breaking change announcements.

Az.Migrate 2.12.0

• Preannounced breaking changes. Please refer to https://go.microsoft.com/fwlink/?linkid=2333229
• Added 'TargetSecurityType' and 'TargetVMSecureBootEnabled' parameters to 'New-AzMigrateServerReplication' to support Trusted Launch VM (TVM) security type during server replication

Az.MySql 1.5.2

• Updated preannouncement breaking changes date to May 2026.

Az.NetAppFiles 1.1.0

• Updated to api-version 2025-12-01
• Added new cmdlet 'Get-AzNetAppFilesVolumeQuotaReport' to get quota report for a volume with optional filtering by 'QuotaType', 'QuotaTarget', and 'UsageThresholdPercentage'
• Added 'DesiredRansomwareProtectionState' parameter to 'New-AzNetAppFilesVolume' and 'Update-AzNetAppFilesVolume' to enable or disable Advanced Ransomware Protection (ARP) on volumes
• Added new cmdlet 'Get-AzNetAppFilesRansomwareReport' to list or get Advanced Ransomware Protection (ARP) reports for a volume
• Added new cmdlet 'Clear-AzNetAppFilesRansomwareReportSuspect' to clear suspects on an ARP report by marking file extensions as 'PotentialThreat' or 'FalsePositive'

Az.Network 7.26.0

• Onboarded 'Microsoft.KubernetesConfiguration/privateLinkScopes' to Private Link Common Cmdlets
• Added EdgeZone (Extended Location) parameter support for Azure Firewall
  • Added '-EdgeZone' parameter to 'New-AzFirewall' cmdlet
  • When '-EdgeZone' is specified, availability zones are not supported for Azure Firewall resources

Az.RecoveryServices 7.11.2

• Added Cross region restore support for upcoming regions Southeast Asia 3

Az.RedisEnterpriseCache 1.6.1

• Preannounced breaking changes. Please refer to https://go.microsoft.com/fwlink/?linkid=2333229

Az.ServiceFabric 5.1.0

• Added new OS options to 'New-AzServiceFabricCluster' '-OS' parameter: 'WindowsServer2019Datacenter', 'WindowsServer2019DatacenterGen2', 'WindowsServer2022Standard', 'WindowsServer2022Core', 'WindowsServer2022Gen2', 'WindowsServer2022Hotpatch', 'WindowsServer2025', 'WindowsServer2025AzureEdition', 'WindowsServer2025AzureEditionCore', 'WindowsServer2025Gen2', 'UbuntuServer2204', and 'UbuntuServer2404'
• Updated SFMC to latest api general version '2026-02-01'

Az.SqlVirtualMachine 2.4.1

• Preannounced breaking changes. Please refer to https://go.microsoft.com/fwlink/?linkid=2333229

Az.StackHCIVM 1.1.1

• Added breaking change announcements for upcoming SecureString parameter type changes in 'New-AzStackHCIVMImage' and 'New-AzStackHCIVMVirtualMachine'

SHA256 Hashes of the release artifacts

• Az-Cmdlets-15.5.0.40690.tar.gz
  • 90867DDF4A117909C2EDAEA468ADF465332EBDA0EDD48C4025AEF63312CE5523

Az.ComputeLimit v0.1.0

https://www.powershellgallery.com/packages/Az.ComputeLimit/0.1.0

• First release of Az.ComputeLimit module

Az.FileShare v0.1.0

https://www.powershellgallery.com/packages/Az.FileShare/0.1.0

• First preview release for module Az.FileShare

Az 15.4.0

Gallery Module for Azure PowerShell: https://www.powershellgallery.com/packages/Az/15.4.0

To install Az from the PowerShell Gallery, run the following command:

Install-Module -Name Az -Repository PSGallery -Force

To update from an older version of Az, run the following command:

Update-Module -Name Az

Docker images

• mcr.microsoft.com/azure-powershell:latest
• mcr.microsoft.com/azure-powershell:alpine-3.21
• mcr.microsoft.com/azure-powershell:15.4.0-alpine-3.21
• mcr.microsoft.com/azure-powershell:alpine-3.22
• mcr.microsoft.com/azure-powershell:15.4.0-alpine-3.22
• mcr.microsoft.com/azure-powershell:debian-12
• mcr.microsoft.com/azure-powershell:15.4.0-debian-12
• mcr.microsoft.com/azure-powershell:azurelinux-3.0
• mcr.microsoft.com/azure-powershell:15.4.0-azurelinux-3.0
• mcr.microsoft.com/azure-powershell:azurelinux-3.0-arm64
• mcr.microsoft.com/azure-powershell:15.4.0-azurelinux-3.0-arm64
• mcr.microsoft.com/azure-powershell:ubuntu-24.04
• mcr.microsoft.com/azure-powershell:15.4.0-ubuntu-24.04

Release Notes

Az.Accounts 5.3.3

• Updated MSAL to 4.82.1 to fix an issue with ARM endpoint discovery.

Az.Compute 11.4.0

• Added '-DiskIOPSReadWrite' and '-DiskMBpsReadWrite' parameters to 'Add-AzVMDataDisk' cmdlet
• Added '-Tag' and '-Location' parameters to 'New-AzSshKey' cmdlet
• Added '-Tag' parameter to 'Update-AzSshKey' cmdlet
• Added support for Disk Availability Policy
  • Added '-ActionOnDiskDelay' parameter to 'New-AzDiskConfig' cmdlet to configure disk availability behavior
  • Added '-ActionOnDiskDelay' parameter to 'New-AzDiskUpdateConfig' cmdlet to update disk availability behavior

Az.Databricks 1.11.0

• Upgraded API version to 2026-01-01
  • Added ComputeMode parameter to New-AzDatabricksWorkspace cmdlet supporting 'Hybrid' and 'Serverless' compute modes
  • Changed ComplianceStandard parameter type from enum to String[] for greater flexibility

Az.ElasticSan 1.7.0

• Supported auto scale when creating and updating an Elastic SAN.
  • 'New-AzElasticSan'
  • 'Update-AzElasticSan'
• Supported checking whether disk snapshot backup can be taken for volumes.
  • 'Test-AzElasticSanVolumeBackup'
  • 'Test-AzElasticSanVolumeRestore'

Az.KeyVault 6.4.3

• Added upcoming breaking change warning messages to 'Get-AzKeyVaultKey' and 'Get-AzKeyVaultSecret' for filtering certificate-backed keys and secrets.

Az.Network 7.25.1

• Onboarded 'Microsoft.DataReplication/replicationVaults' to Private Link Common Cmdlets

Az.Resources 9.0.3

• Updated the implementation of -Metadata parameter processing for cmdlets that use it for security. No behavior change.

Az.Sql 6.4.1

• Add support for the versionless AKV keys.
  • The cmdlets supported are 'Add-AzSqlServerKeyVaultKey', 'Get-AzSqlServerKeyVaultKey', 'Set-AzSqlServerTransparentDataEncryptionProtector', 'Get-AzSqlServerTransparentDataEncryptionProtector', 'New-AzSqlDatabase', 'Get-AzSqlDatabase', 'Set-AzSqlDatabase', 'New-AzSqlDatabaseCopy', 'New-AzSqlDatabaseSecondary' and 'Restore-AzSqlDatabase'
• Added public preview tag for 'EnableSoftDelete' and 'SoftDeleteRetentionDays' properties in 'New-AzSqlServer' and 'Set-AzSqlServer' cmdlets
• Added public preview tag for 'Get-AzSqlDeletedServer' and 'Restore-AzSqlServer' cmdlets

Az.StorageAction 1.0.1

• Preannounced breaking changes. Please refer to https://go.microsoft.com/fwlink/?linkid=2333229

SHA256 Hashes of the release artifacts

• Az-Cmdlets-15.4.0.40597.tar.gz
  • 3E9AD55E407884372ACDC1A108785CB697F5C46599AAE6EBDD0D4350556094E0

Az.Resources v9.0.2-preview

https://www.powershellgallery.com/packages/Az.Resources/9.0.2-preview

• Updated the implementation of -Metadata parameter processing for cmdlets that use it for security. No behavior change.