azurerm_storage_account - Remove TLS1_3 as an valid value for min_tls_version

Author: magodo

internal/services/storage/storage_account_resource.go

@@ -1248,10 +1248,14 @@ func resourceStorageAccount() *pluginsdk.Resource {
 		}
 
 		resource.Schema["min_tls_version"] = &pluginsdk.Schema{
-			Type:         pluginsdk.TypeString,
-			Optional:     true,
-			Default:      string(storageaccounts.MinimumTlsVersionTLSOneTwo),
-			ValidateFunc: validation.StringInSlice(storageaccounts.PossibleValuesForMinimumTlsVersion(), false),
+			Type:     pluginsdk.TypeString,
+			Optional: true,
+			Default:  string(storageaccounts.MinimumTlsVersionTLSOneTwo),
+			ValidateFunc: validation.StringInSlice([]string{
+				string(storageaccounts.MinimumTlsVersionTLSOneZero),
+				string(storageaccounts.MinimumTlsVersionTLSOneOne),
+				string(storageaccounts.MinimumTlsVersionTLSOneTwo),
+			}, false),
 		}
 
 		resource.Schema["queue_properties"] = &pluginsdk.Schema{

website/docs/r/storage_account.html.markdown

@@ -104,7 +104,7 @@ The following arguments are supported:
 
 * `https_traffic_only_enabled` - (Optional) Boolean flag which forces HTTPS if enabled, see [here](https://docs.microsoft.com/azure/storage/storage-require-secure-transfer/) for more information. Defaults to `true`.
 
-* `min_tls_version` - (Optional) The minimum supported TLS version for the storage account. Possible values are `TLS1_0`, `TLS1_1`, `TLS1_2` and `TLS1_3`. Defaults to `TLS1_2` for new storage accounts.
+* `min_tls_version` - (Optional) The minimum supported TLS version for the storage account. Possible values are `TLS1_0`, `TLS1_1` and `TLS1_2`. Defaults to `TLS1_2` for new storage accounts.
 
 ~> **Note:** Azure Services will require TLS 1.2+ by August 2025, please see this [announcement](https://azure.microsoft.com/en-us/updates/v2/update-retirement-tls1-0-tls1-1-versions-azure-services/) for more.