Upgrade azurerm provider to v4.x (Networking)

[leotsys]

---

Upgrade azurerm provider to v4.x (Networking)

Migrating from azurerm 3.117.1 to v4.x.

---

Provider constraint

    azurerm = {
      source  = "hashicorp/azurerm"
      version = ">= 4.40.0, < 5.0"
    }

---

Key resource changes

Resource	Change	New / Required Behavior
azurerm_virtual_network	address_space changed from List → Set	Stop referencing by index (e.g., address_space[0]).
azurerm_virtual_network_gateway_connection	shared_key is now Required	Must be explicitly defined.
azurerm_subnet	Added new properties (see below)	Also address_prefix → address_prefixes for multi-CIDR.
azurerm_subnet	Removed deprecated props	Use private_endpoint_network_policies and private_link_service_network_policies_enabled.
azurerm_subnet	Default policy changes	private_endpoint_network_policies = Disabled, private_link_service_network_policies_enabled = true.
azurerm_public_ip	sku defaults to Standard	Set explicitly if you relied on Basic.
azurerm_network_interface	Deprecated flags removed	Use accelerated_networking_enabled, ip_forwarding_enabled.
azurerm_network_interface	dns_servers no longer Computed	Add to ignore_changes if unwanted diffs appear.

---

New properties in azurerm_subnet

• default_outbound_access_enabled

• delegation

• private_endpoint_network_policies

• private_link_service_network_policies_enabled

• route_table_id

• service_endpoints

• service_endpoint_policy_ids

---

Quick notes

• Upgrade may trigger “resource replacement” warnings — most cases are in-place updates.

---