- Updated MSAL to 4.82.1 to fix an issue with ARM endpoint discovery.
- Updated Azure.Core from 1.47.3 to 1.50.0
- Fixed telemetry to capture client request ID instead of server response ID for AutoRest-generated cmdlets [#23555]
- Updated Azure.Core from 1.45.0 to 1.47.3
- Updated
AuthenticationAssemblyLoadContextproject to deprecate .NET 6.0 and build on .NET 8.0. - Added Server-Side Pagination Support for
Invoke-AzRestMethodcommand via-Paginateparameter.
- Fixed an issue where
Clear-AzContextdoes not clear the token cache when broker is enabled. - Added new parameter
-ClaimsChallengetoConnect-AzAccountto support claims challenge authentication for MFA. - Refined the error message when a cmdlet fails because of policy violations about Multi-Factor Authentication (MFA) to provide more actionable guidance.
- Updated the date in the message about multi-factor authentication (MFA). For more details, see https://go.microsoft.com/fwlink/?linkid=2276971
- Enabled setting the authentication scope for SSH cmdlets by
Set-AzEnvironment -SshAuthScope <String>.
- Upgrade Azure.Core to 1.45.0
- Force
Get-AzAccessTokento always return SecureString as long asAsSecureStringis set
- Changed the default output access token of
Get-AzAccessTokenfrom plain text toSecureString. - Removed the warning message about failing to initialize PSStyle in automation runbooks. [#26155]
- Increased the timeout for tab-completion of location, resource group, etc. to 10 seconds.
- Updated warning message about MFA. For more details, see https://go.microsoft.com/fwlink/?linkid=2276971
- Fixed token in auxiliary authentication header.
- Collected authentication method for telemetry in end process of cmdlet.
- Added AppConfiguration ResourceId and Suffix endpoints for Mooncake and USGov clouds to fix issue [#24219]
- Fixed unsigned dll:
System.Buffers.dllSystem.Memory.dll
- Upgraded nuget package to signed package.
- Fixed the Managed Identity parameter set description of
AccountIdinConnect-AzAccount. - Made the breaking change warnings about
Get-AzAccessTokennot appear when-AsSecureStringis used. - Fixed an issue that cmdlets may report warnings of "KeyNotFoundException". #26624
- Fixed an issue that the
-AppliesToparameter ofUpdate-AzConfigdoes not work as expected. - Upgraded Azure.Core to 1.44.1 and Azure.Identity to 1.13.0.
- Updated Azure PowerShell intercept survey prompt.
- [Breaking Change] Removed alias
Resolve-Errorfor the cmdletResolve-AzError. - Updated the
Get-AzAccessTokenbreaking change warning message. - Added Long Running Operation Support for Invoke-AzRest command.
- Fixed the issue that
Export-AzSshConfigandEnter-AzVMfrom Az.Ssh are not able to use when WAM is enabled. - Added breaking change preannouncement for the removal of alias
Resolve-Error. #26189 - Integrated new detection library to expand the scope of secrets.
- Added customized UserAgent for ARM telemetry.
- Fixed secrets exposure in example documentation.
- Updated
Connect-AzAccountto fix a display issue in PowerShell ISE [#24556]. - Updated the reference of Azure PowerShell Common to 1.3.100-preview.
- Used Azure.Identity and Azure.Core directly for client assertion [#22628].
- Reduced the frequency of displaying sign-in announcement messages.
- Upgraded Azure.Core to 1.41.0 to include the fix for
BearerTokenAuthenticationPolicy - Removed the informational table about selected context to avoid duplication with output table.
- Fixed bug handling GUID type subscription Id.
- Added a warning message in
Connect-AzAccountto discourage the use of the username/password (a.k.a ROPC) login flow. - Preannounced a breaking change in
Get-AzAccessTokento changeTokenproperty fromStringtoSecureString.
- Disable WAM when the customers login with device code flow or username password (ROPC) flow to prevent a potential issue with token cache.
- Fixed CVE-2024-35255
- Updated
Microsoft.Identity.Client.NativeInteropto fix the WAM pop window issue in elevated mode [#24967] - Updated the reference of Azure PowerShell Common to 1.3.98-preview.
- Limited promotional message to interactive scenarios only
- Web Account Manager (WAM) was set the default experience of interactive login. For more details please refer to https://go.microsoft.com/fwlink/?linkid=2272007
- Enabled secrets detection option by default.
- Fixed a null reference issue during the process of
Get-AzContext -ListAvailable[#24854]. - Supported interactive subscription selection for user login flow. See more details at Announcing a new login experience with Azure PowerShell and Azure CLI
- Added config
LoginExperienceV2to allow customer to switch the default behavior of context selection back. Check the help document ofUpdate-AzConfigfor more details. - Supported auto-discovery of the endpoint of OperationalInsights (azure-powershell-common/pull/414)
- Updated the reference of Azure PowerShell Common to 1.3.94-preview.
- [Breaking Change] Removed config
DisableErrorRecordsPersistenceto disable writing error records, error recording is now opt-in - Added config
EnableErrorRecordsPersistenceto enable writing error records to file system
Important
Preannouncement: The default interactive login experience will change from browser based to Web Account Manager (WAM) based on supported platforms, learn more. Only interactive login flow is influenced by WAM. This will take effect from the release of May 21st.
- Fixed secrets detection issues.
- Enabled globally disabling instance discovery before token acquisition [#22535].
- Implemented secrets detection feature for autorest modules.
- Added
AsSecureStringtoGet-AzAccessTokento convert the returned token to SecureString [#24190]. - Upgraded Azure.Core to 1.37.0.
- Added a preview feature to detect secrets and sensitive information from the output of Azure PowerShell cmdlets to prevent leakage. Enable it by
Set-AzConfig -DisplaySecretsWarning $true. Learn more at https://go.microsoft.com/fwlink/?linkid=2258844 - Fixed
CacheDirectoryandCacheFileout-of-sync issue in AzureRmContextSettings.json and the customers are not allowed to change these 2 properties. - Redirected device code login messages from warning stream to information stream if use device authentication in
Connect-AzAccount.
- Adjusted output format to be more user-friendly for
Get-AzContext/Tenant/SubscriptionandInvoke-AzRestMethod, including- ordering and grouping output items to make items easy to find.
- re-prioritizing positions for output properties to highlight valuable properties.
- Upgraded the reference of Azure PowerShell Common to 1.3.90-preview.
- Upgraded Azure.Identity to 1.10.3 [#23018].
- Renamed token cache from
msal.cachetomsal.cache.caeormasl.cache.nocae.
- Renamed token cache from
- Enabled Continue Access Evaluation (CAE) for all Service Principals login methods.
- Supported signing in with Microsoft Account (MSA) via Web Account Manager (WAM). Enable it by
Set-AzConfig -EnableLoginByWam $true. - Fixed the multiple
x-ms-unique-idvalues issue.
- Fixed the authentication issue when using
FederatedTokenin Sovereign Clouds. [#23742] - Added upcoming breaking change warning for deprecation of config parameter
DisableErrorRecordsPersistence.
- Enabled in-tool notification for version upgrade by default.
- Upgraded Azure.Core to 1.35.0.
- Added the module name in breaking change messages
- Upgraded Microsoft.ApplicationInsights version from 2.13.1 to 2.18.0
- Supported in-tool notification for version upgrade.
- Added an alias
Set-AzConfigtoUpdate-AzConfig - Refilled credentials from
AzKeyStorewhen runSave-AzContext[#22355] - Added config
DisableErrorRecordsPersistenceto disable writing error records to file system [#21732] - Updated Azure.Core to 1.34.0.
- Changed output stream from debug stream to warning stream for
CmdletPreviewAttribute - Decreased the prompted frequency of preview warning message to once per cmdlet in one session
- Reworded default preview message and added estimated GA date for
CmdletPreviewAttribute - Updated Azure.Core to 1.33.0
- Changed
galleryproperty to be optional in ARM metadata ofSet-AzEnvironmentandAdd-AzEnvironment[#22037]. - Enabled customers to login with an valid domain using Service Principal [#20728]
- Updated System.Security.Permissions to 4.7.0.
- Fixed
AzureSynapseAnalyticsEndpointResourceIdofUSGovernmentenvironment. - Updated Azure.Core to 1.31.0.
- Updated the reference of Azure PowerShell Common to 1.3.75-preview.
- Fixed an issue that broke some cmdlets in Az.Synapse module.
- Fixed the issue that errors related to WAM are thrown when it is not enabled. [#20871] [#20824]
- Updated Azure.Core library to 1.28.0.
- Fixed an issue that the helper message about missing modules shows up at the wrong time. [#19228]
- Added a hint message for some resource creation cmdlets when there is another region which may reduce the costs.
- Supported environment initialization and auto-discovery with ArmMetadata of API version 2022-09-01.
- Supported Web Account Manager on ARM64-based Windows systems. Fixed an issue where
Connect-AzAccountfailed with error "Unable to load DLL 'msalruntime_arm64'". [#20700] - Enabled credential to be found only by applicationId while tenant was not matched when acquire token. [#20484]
- When Az.Accounts ran in parallel, the waiters were allowed to wait infinitely to avoid throw exception in automation environment. [#20455]
- Fixed an issue where Az.Accounts cannot be imported correctly. [#20615]
- Supported Web Account Manager (WAM) as an opt-in interactive login experience. Enable it by
Update-AzConfig -EnableLoginByWam $true. - Optimized the mechanism for assembly loading.
- Enabled AzKeyStore with keyring in Linux.
- Fixed a typo in GetAzureRmContextAutosaveSetting.cs changing the cmdlet class name to GetAzureRmContextAutosaveSetting
- Removed survey on error message in
Resolve-AzError. [#20398]
- Enabled caching tokens when logging in with a client assertion. This fixed the incorrectly short lifespan of tokens.
- Upgraded target framework of Microsoft.Identity.Client to net461 [#20189]
- Stored
ServicePrincipalSecretandCertificatePasswordintoAzKeyStore. - Updated the reference of Azure PowerShell Common to 1.3.67-preview.
- Updated
Get-AzSubscriptionto retrieve subscription by Id rather than listed all the subscriptions from server if subscription Id is provided. [#19115]
- Upgraded Azure.Core to 1.25.0 and Azure.Identity to 1.6.1
- Upgraded Microsoft.Identity.Client to 4.46.2 and Microsoft.Identity.Client.Extensions.Msal to 2.23.0
- Upgraded Microsoft.ApplicationInsights to 2.13.1
- [Breaking Change] Changed target framework of AuthenticationAssemblyLoadContext to netcoreapp3.1.
- [Breaking Change] Removed built-in environment of Azure Germany
- Supported tenant domain as input while using
Connect-AzAccountwith parameterTenant. [#19471] - Used the ArgumentCompleter attribute to replace the dynamic parameters of
Get-AzContext. [#18041] - Fixed issue that module cannot be imported when required file is locked [#19624]
- Deduplicated subscriptions belonging to multiple tenants while using
Get-AzSubscriptionwith parameterSubscriptionName. [#19427]
- Supported returning all subscriptions with specified name while using
Get-AzSubscriptionwith parameterSubscriptionName. [#19295] - Fixed null reference exception when cmdlet uses AzureRestOperation [#18104]
- Updated survey message and settings
- Implemented
SupportsShouldProcessforInvoke-AzRestMethod - Supported giving suggestions if an Azure PowerShell command cannot be found, for example when there is a typo in command name.
- Supported exporting and importing configurations by
Export-AzConfigandImport-AzConfig. - Fixed an issue that Az.Accounts may fail to be imported in parallel PowerShell processes. [#18321]
- Fixed incorrect access token [#18105]
- Upgraded version of Microsoft.Identity.Client for .NET Framework. [#18495]
- Fixed an issue that Az.Accounts failed to be imported if multiple environment variables, which only differ by case, are set. [#18304]
- Added a preview feature allowing user to control the following configurations by using
Get-AzConfig,Update-AzConfigandClear-AzConfig:DefaultSubscriptionForLogin: Subscription name or GUID. Sets the default context for Azure PowerShell when logging in without specifying a subscription.DisplayBreakingChangeWarning: Controls if warning messages for breaking changes are displayed or suppressed.EnableDataCollection: When enabled, Azure PowerShell cmdlets send telemetry data to Microsoft to improve the customer experience.
- Upgraded System.Reflection.DispatchProxy on Windows PowerShell [#17856]
- Upgraded Azure.Identity to 1.6.0 and Azure.Core to 1.24.0
- Upgraded Microsoft.Rest.ClientRuntime to 2.3.24
- Added
SshCredentialFactoryto support get ssh credential of vm from msal. - Fixed the bug of cmdlet fails when -DefaultProfile is set to service principal login context. [#16617]
- Fixed the issue that authorization does not work in Dogfood environment
- Changed target framework of AuthenticationAssemblyLoadContext to netcoreapp2.1 [#17428]
- Fixed the issue that authorization does not work in customized environment [#17157]
- Enabled Continue Access Evaluation for MSGraph
- Improved error message when login is blocked by AAD
- Improved error message when silent reauthentication failed
- Loaded System.Private.ServiceModel and System.ServiceModel.Primitives on Windows PowerShell [#17087]
- Removed legacy assembly System.Private.ServiceModel and System.ServiceModel.Primitives [#16063]
- Copied
ServicePrincipalSecretandCertificatePasswordfrom Az.Accounts builtin profile to customer set profile. [#16617] - Updated help message and help markdown for parameter
Tenantof the cmdletSet-AzContext. [#16515] - Fixed the issue that Azure PowerShell could not work in a workflow. [#16408]
- Fixed the doubled Api Version in the URI of the underlying request issued by
Invoke-AzRestMethod. [#16615]
- Removed
ServicePrincipalSecretandCertificatePasswordinPSAzureRmAccount[#15427] - Added optional parameter
MicrosoftGraphAccessTokentoConnect-AzAccount - Added optional parameters
MicrosoftGraphEndpointResourceId,MicrosoftGraphUrltoAdd-AzEnvironmentandSet-AzEnvironment - Added
-AccountIdproperty toUserWithSubscriptionIdparameter set ofConnect-AzAccountwhich allows a user name to be pre-selected for interactive logins - Added
-Uriand-ResourceIdtoInvoke-AzRestMethod - Added Environment auto completer to the following cmdlets: Connect-AzAccount, Get-AzEnvironment, Set-AzEnvironment, and Remove-AzEnvironment [#15991]
- Added module name and version to User-Agent string [#16291]
- Upgraded Azure.Identity to 1.5.0
- Added new version of AAD service client using Microsoft Graph API
- Added
-FederatedTokenonConnect-AzAccount - Updated Azure.Core from 1.19.0 to 1.20.0.
- Supported getting the access token for Microsoft Graph.
- Added AuthorizeRequestDelegate to allow service module to adjust token audience.
- Utilized AssemblyLoadContext to resolve assembly conflict issues in PowerShell.
- Updated Azure.Core from 1.16.0 to 1.19.0.
- Corrected the URLs to Azure Portal in the results of
Get-AzEnvironmentandGet-AzContext. [#15429] - Made infrastructural changes to support overriding default subscription via a
-SubscriptionId <String>parameter.- Az.Aks is the first module that supports it.
- Disabled context auto saving when token cache persistence fails on Windows and macOS
- Added PowerShell version into telemetry record
- Upgraded Microsoft.ApplicationInsights from 2.4.0 to 2.12.0
- Updated Azure.Core to 1.16.0
- Fixed access error when subscription has no
Tagsproperty [#15425].
- Added Tags, AuthorizationSource to PSAzureSusbscripiton and added TenantType, DefaultDomain, TenantBrandingLogoUrl, CountryCode to PSAzureTenant [#15220]
- Upgraded subscription client to 2021-01-01 [#15220]
- Removed Interactive mode check in common lib
- Added endpoint of OperationalInsights to environment AzureChinaCloud [#15305]
- Printed auto generated modules' default logs to verbose stream
- Added cmdlet
Open-AzSurveyLink - Supported certificate file as input parameter of Connect-AzAccount
- Upgraded Azure.Identity to 1.4 and MSAL to 4.30.1
- Removed obsolete parameters
ManagedServiceHostName,ManagedServicePortandManagedServiceSecretof cmdletConnect-AzAccount, environment variablesMSI_ENDPOINTandMSI_SECRETcould be used instead - Customized display format of PSAzureRmAccount to hide secret of service principal [#14208]
- Added optional parameter
AuthScopetoConnect-AzAccountto support enhanced authentication of data plane features - Set retry times by environment variable [#14748]
- Supported subject name issuer authentication
- Fallback to first valid context if current default context key is "Default" which is invalid
- Fixed incorrect warning message on Windows PowerShell [#14556]
- Set Azure Environment variable
AzureKeyVaultServiceEndpointResourceIdaccording to the value ofAzureKeyVaultDnsSuffixwhen discovering environment
- Upgrade Azure.Identity to fix the issue that Connect-AzAccount fails when ADFS credential is used [#13560]
- Tracked CloudError code in exception
- Raised 'ContextCleared' event when
Clear-AzContextwas executed
- Shown correct client request id on debug message [#13745]
- Added common Azure PowerShell exception type
- Supported storage API 2019-06-01
- Fixed the issue that Http proxy is not respected in Windows PowerShell [#13647]
- Improved debug log of long running operations in generated modules
- Managed to parse ExpiresOn time from raw token if could not get from underlying library
- Improved warning message if Interactive authentication is unavailable
- Fixed the issue that using Task.Result incorrectly causes unclear error message if browser is not available for Interactive auth
- Fixed an issue that TenantId may be not respected if using
Connect-AzAccount -DeviceCode[#13477] - Added new cmdlet
Get-AzAccessToken - Fixed an issue that error happens if user profile path is inaccessible
- Fixed an issue causing Write-Object error during Connect-AzAccount [#13419]
- Added parameter "ContainerRegistryEndpointSuffix" to:
Add-AzEnvironment,Set-AzEnvironment - Supported interrupting login by hitting CTRL+C
- Fixed an issue causing
Connect-AzAccount -KeyVaultAccessTokennot working [#13127] - Fixed null reference and method case insensitive in
Invoke-AzRestMethod
- Fixed one issue related to MSI
- Fixed the issue that token is not renewed after expiring for LRO [#13367]
- Fixed the issue that AccountId is not respected in MSI [#13376]
- Fixed the issue that error message is unclear if browser is not available for Interactive auth [#13340]
- [Breaking Change] Removed
Get-AzProfileandSelect-AzProfile - Replaced Azure Directory Authentication Library with Microsoft Authentication Library(MSAL)
- Fixed DateTime parse issue in common libraries [#13045]
- Formatted the upcoming breaking change messages
- Updated Azure.Core to 1.4.1
- Loaded all public cloud environments when discovery endpoint doesn't return default AzureCloud or other public environments [#12633]
- Exposed SubscriptionPolicies in
Get-AzSubscription[#12551]
- Updated
Connect-AzAccountto accept parameterMaxContextPopulation[#9865] - Updated SubscriptionClient version to 2019-06-01 and display tenant domains [#9838]
- Supported home tenant and managedBy tenant information of subscription
- Corrected module name, version info in telemetry data
- Adjusted SqlDatabaseDnsSuffix and ServiceManagementUrl if environment metadata endpoint returns incompatible value
- Added new cmdlet
Invoke-AzRestMethod - Fixed an issue that may cause authentication errors in multi-process scenarios such as running multiple Azure PowerShell cmdlets using
Start-Job[#9448]
- Supported discovering environment setting by default and adding environment via
Add-AzEnvironment - Update preloaded assemblies [#12024], [#11976]
- Updated Azure.Core assembly
- Fixed an issue that may cause
Connect-AzAccountto fail in multi-threaded execution [#11201]
- Fixed an issue that may cause Az to skip logs in Azure Automation or PowerShell jobs [#11492]
- Updated
Add-AzEnvironmentandSet-AzEnvironmentto accept parametersAzureSynapseAnalyticsEndpointResourceIdandAzureSynapseAnalyticsEndpointSuffix - Added Azure.Core related assemblies into Az.Accounts, supported PowerShell platforms include Windows PowerShell 5.1, PowerShell Core 6.2.4, PowerShell 7+
- Updated Azure PowerShell survey URL in
Resolve-AzError[#11507]
- Fixed
Get-AzTenant/Get-AzDefault/Set-AzDefaultthrow NullReferenceException when not login [#10292]
- Open Azure PowerShell survey page in
Send-Feedback[#11020] - Display Azure PowerShell survey URL in
Resolve-Error[#11021] - Added Az version in UserAgent
- Added SubscriptionId, TenantId, and execution time into data of client side telemetry
- Disable context auto saving when AzureRmContext.json not available
- Update the reference to Azure Powershell Common to 1.3.5-preview
- Updated Add-AzEnvironment and Set-AzEnvironment to accept parameters AzureAttestationServiceEndpointResourceId and AzureAttestationServiceEndpointSuffix
- Add client-side telemetry info for Az 4.0
preview
- Update references in .psd1 to use relative path
- Set correct UserAgent for client-side telemetry for Az 4.0 preview
- Display user friendly error message when context is null in Az 4.0
- Add endpoints for attestation service
- Add a deprecation message for
Resolve-Erroralias.
- Update telemetry and url rewriting for generated modules, fix windows unit tests.
- Fixed miscellaneous typos across module
- Support user-assigned MSI in Azure Functions Authentication (#9479)
- Update common code to use latest version of ClientRuntime
- Add support for profile cmdlets
- Add support for environments and data planes in generated cmdlets
- Update common packages to include new PolicyInsights library * Fix bug where incorrect endpoint was being used in some cases for data plane cmdlets in Windows PowerShell
- Fix bug with incorrect URL being used in some cases for Functions calls
- More information here: Azure#8983
- Fix Issue with aliases from AzureRM to Az cmdlets
- Set-AzureRmVMBootDiagnostics -> Set-AzVMBootDiagnostic
- Export-AzureRMLogAnalyticThrottledRequests -> Export-AzLogAnalyticThrottledRequest
- Update Authentication Library to fix ADFS issues with username/password auth
- Update Uninstall-AzureRm to correctly delete modules in Mac
- Updated Add-AzEnvironment and Set-AzEnvironment to accept parameter AzureAnalysisServicesEndpointResourceId
- Add 'Register-AzModule' command to support AutoRest generated cmdlets
- Update examples for Connect-AzAccount
- Add additional framework extensions for .Net Framework execution
- Update common packages to include new wildcard support functions
- Update to latest version of ClientRuntime
- Release with correct version of Authentication
- Enable MSI Authentication in Azure Functions and WebApps
- Add interactive and username/password authentication for Windows PowerShell 5.1 only
- Update incorrect online help URLs
- Add warning message in PS Core for Uninstall-AzureRm
- Add 'Local' Scope to Enable-AzureRmAlias
- Bug fix for missing path in Uninstall-AzureRm
- General availability of
Az.Accountsmodule