Merge pull request #25471 from yifanz7/mergestorage

[Storage][Do Not Squash] Merge recent chanegs from main to Az.Storage-preview

Author: VeryEarly

.azure-pipelines/security-tools.yml

@@ -53,7 +53,6 @@ jobs:
       outputFormat: sarif
       scanFolder: SecurityTmp
       suppressionsFile: tools/SecurityTools/CredScanSuppressions.json
-  
   - task: PowerShell@2
     displayName: Generate a response text file for BinSkim
     inputs:
@@ -88,3 +87,19 @@ jobs:
     inputs:
       artifactName: artifacts
       targetPath: artifacts
+  - task: securedevelopmentteam.vss-secure-development-tools.build-task-publishsecurityanalysislogs.PublishSecurityAnalysisLogs@3
+    # see https://eng.ms/docs/microsoft-security/microsoft-threat-protection-mtp/cloud-and-enterprise-security-cesec/security-integration/guardian-wiki/sdl-azdo-extension/publish-security-analysis-logs
+    displayName: 'Publish Security Analysis Logs'
+    inputs:
+      ArtifactName: CodeAnalysisLogs
+      ArtifactType: Container
+      PublishProcessedResults: false
+      AllTools: true
+  - task: securedevelopmentteam.vss-secure-development-tools.build-task-postanalysis.PostAnalysis@2
+    # see https://eng.ms/docs/microsoft-security/microsoft-threat-protection-mtp/cloud-and-enterprise-security-cesec/security-integration/guardian-wiki/sdl-azdo-extension/secure-development-tools-extension-for-azure-devops#post-analysis-build-break:~:text=To%20introduce%20a%20build%20break
+    displayName: Analyze Results (may block build)
+    inputs:
+      GdnBreakAllTools: false
+      GdnBreakGdnToolBinSkim: true
+      GdnBreakGdnToolCredScan: true
+      GdnBreakGdnToolPoliCheck: true

.azure-pipelines/util/live-test-steps.yml

@@ -70,8 +70,9 @@ jobs:
       definition: $(SignPipelineDefinitionId)
       buildVersionToDownload: 'latestFromBranch'
       branchName: 'refs/heads/internal/release'
-      artifactName: 'artifacts'
+      artifactName: $(ArtifactName)
       targetPath: $(Pipeline.Workspace)
+      itemPattern: '**/artifacts/**'
 
   - task: DownloadPipelineArtifact@2
     condition: and(succeeded(), ne(variables['skipLatest'], 'true'), eq(variables['GalleryName'], 'Sign'), ne(variables['PipelineBuildId'], ''))
@@ -82,9 +83,9 @@ jobs:
       definition: $(SignPipelineDefinitionId)
       buildVersionToDownload: 'specific'
       pipelineId: $(PipelineBuildId)
-      artifactName: 'artifacts'
+      artifactName: $(ArtifactName)
       targetPath: $(Pipeline.Workspace)
-
+      itemPattern: '**/artifacts/**'
   - task: PowerShell@2
     condition: and(succeeded(), ne(variables['skipLatest'], 'true'), ne(variables['GalleryName'], 'PSGallery'))
     displayName: Copy artifacts to local repository
@@ -93,7 +94,7 @@ jobs:
       targetType: inline
       script: |
         $azPackagesDir = New-Item -Name AzPreviewPackages -Path $(DataLocation) -ItemType Directory -Force
-        $azPackagesFiles = Join-Path -Path $(Pipeline.Workspace) -ChildPath *.nupkg
+        $azPackagesFiles =  Get-ChildItem -Path "$(Pipeline.Workspace)" -Recurse -Filter "*.nupkg" 
         Move-Item -Path $azPackagesFiles -Destination $azPackagesDir
         Get-ChildItem -LiteralPath $azPackagesDir
 

.azure-pipelines/util/smoke-test-steps.yml

@@ -54,6 +54,7 @@ jobs:
       buildVersionToDownload: 'latest'
       artifactName: $(ArtifactName)
       targetPath: $(Pipeline.Workspace)
+      itemPattern: '**/artifacts/**'
 
   - task: DownloadPipelineArtifact@2
     condition: and(succeeded(), eq(variables['GalleryName'], 'LocalRepo'), ne(variables['PipelineId'], ''))
@@ -66,6 +67,7 @@ jobs:
       pipelineId: $(PipelineId)
       artifactName: '$(ArtifactName)'
       targetPath: '$(Pipeline.Workspace)'
+      itemPattern: '**/artifacts/**'
 
   - task: PowerShell@2
     condition: and(succeeded(), eq(variables['GalleryName'], 'LocalRepo'))
@@ -74,7 +76,8 @@ jobs:
       targetType: 'inline'
       script: |
        New-Item -Path "$(Pipeline.Workspace)" -Name "LocalRepo" -ItemType "directory"
-       Copy-Item -Path "$(Pipeline.Workspace)\\*.nupkg" -Destination "$(Pipeline.Workspace)\\LocalRepo\\"
+       $fileList = Get-ChildItem -Path "$(Pipeline.Workspace)" -Recurse -Filter "*.nupkg" 
+       $fileList | ForEach-Object { Copy-Item -Path $_.FullName -Destination "$(Pipeline.Workspace)\LocalRepo\" -Force }
        Write-Host "List artifacts..."
        Get-ChildItem "$(Pipeline.Workspace)\\LocalRepo\\"
 

.github/policies/resourceManagement.yml

@@ -3263,7 +3263,7 @@ configuration:
         then:
         - mentionUsers:
             mentionees:
-            - sunilagarwal
+            - gbowerman
             - sr-msft
             - niklarin
             replyTemplate: Thanks for the feedback! We are routing this to the appropriate team for follow-up. cc ${mentionees}.

.github/workflows/pr-labeled.yml

@@ -22,4 +22,4 @@ jobs:
       shell: pwsh
       env:
         LABEL: ${{ github.event.label.name }}
-      run: .github/workflows/script/PrLabeled.ps1 -LabelName "$LABEL" -PrUrl $env:PR
+      run: .github/workflows/script/PrLabeled.ps1 -LabelName $env:LABEL -PrUrl $env:PR

.github/workflows/script/PrLabeled.ps1

@@ -25,6 +25,9 @@ This PR was labeled "Breaking Change Release" because it contains breaking chang
     "needs-revision" = @"
 This PR was labeled "needs-revision" because it has unresolved review comments or CI failures.
 Please resolve all open review comments and make sure all CI checks are green. Refer to our [guide](https://eng.ms/docs/cloud-ai-platform/azure-core/azure-management-and-platforms/control-plane-bburns/azure-cli-tools-azure-cli-powershell-and-terraform/azure-cli-tools/devguide/azps/ci_tsg) to troubleshoot common CI failures.
+"@
+    "codegen-survey" = @"
+Thanks for using autorest.powershell to develop your PowerShell module! Would you like to take [a 5-minute survey](https://forms.office.com/r/j6rQuFUqUf?origin=lprLink) to help us improve the tool? Much appreciated :)
 "@
 }
 

ChangeLog.md

@@ -1,3 +1,138 @@
+## 12.1.0 - July 2024
+#### Az.Accounts 3.0.1
+* Disable WAM when the customers login with device code flow or username password (ROPC) flow to prevent a potential issue with token cache.
+* Fixed [CVE-2024-35255](https://github.com/advisories/GHSA-m5vv-6r4h-3vj9)
+* Updated 'Microsoft.Identity.Client.NativeInterop' to fix the WAM pop window issue in elevated mode [#24967]
+* Updated the reference of Azure PowerShell Common to 1.3.98-preview.
+* Limited promotional message to interactive scenarios only
+
+#### Az.Batch 3.6.2
+* Fixed a bug where 'New-AzBatchApplicationPackage' wouldn't work if the application 'AllowUpdates' parameter was set to 'False'.
+
+#### Az.Compute 8.1.0
+* Added parameter '-SourceResourceId' to cmdlet 'Add-AzVMDataDisk'.
+* Added parameter '-IdentityType' to cmdlet 'Update-AzDiskEncryptionSet'.
+* Added 'Invoke-AzSpotPlacementScore' cmdlet, which calls the latest Spot Placement Score API. Set the original 'Invoke-AzSpotPlacementRecommender' as alias to avoid breaking changes.
+
+#### Az.CosmosDB 1.14.4
+* Fixed the issue that Azure.Core.AccessToken is used before assigned.
+
+#### Az.Databricks 1.8.0
+* Updated the Az Databricks cmdlets to 2024-05-01 api version.
+
+#### Az.DataFactory 1.18.5
+* Added UAMI in DynamicsCrm LinkedService
+
+#### Az.DataLakeStore 1.3.2
+* Updated signed 3rd party assembly NLog.dll to PSGallery
+
+#### Az.FrontDoor 1.11.1
+* Fixed a not converting from string to base in CustomBlockResponseBody bug in updating waf policy
+
+#### Az.Functions 4.1.0
+* Upgraded to Microsoft.Web API version 2023-12-01 [#25347]
+* Added support for creating function apps on container app [#22736]
+
+#### Az.KeyVault 6.0.1
+* Fixed an issue during merging certificate process. [#24323]
+
+#### Az.Maintenance 1.4.2
+* Fixed bug where rebootSettings property wasn't updating.
+
+#### Az.Migrate 2.4.0
+* Removed 'at lease one NIC needs to be user selected' constrain when creating/updating server replication (protected item)
+* Added retries for calls to internal Get commands
+
+#### Az.MySql 1.2.0
+* Added cmdlets: 'Get-AzMySqlFlexibleServerAdvancedThreatProtectionSetting' and 'Update-AzMySqlFlexibleServerAdvancedThreatProtectionSetting'
+
+#### Az.Network 7.8.0
+* Added new cmdlets to support Save & Commit (AzureFirewallPolicy draft)
+    - 'New-AzFirewallPolicyDraft'
+    - 'New-AzFirewallPolicyRuleCollectionGroupDraft'
+    - 'Get-AzFirewallPolicyDraft'
+    - 'Get-AzFirewallPolicyRuleCollectionGroupDraft'
+    - 'Set-AzFirewallPolicyDraft'
+    - 'Set-AzFirewallPolicyRuleCollectionGroupDraft'
+    - 'Remove-AzFirewallPolicyDraft'
+    - 'Remove-AzFirewallPolicyRuleCollectionGroupDraft'
+    - 'Deploy-AzFirewallPolicy'
+* Added 'NoHealthyBackendsBehavior' to 'PSProbe', and updated corresponding cmdlets.
+    - 'New-AzLoadBalancerProbeConfig'
+    - 'Add-AzLoadBalancerProbeConfig'
+    - 'Set-AzLoadBalancerProbeConfig'
+* Upgraded API version to '2024-01-01'
+* Updated cmdlet to add 'Premium' as a valid value for 'Sku' parameter and 'enableSessionRecording' feature for Bastion resources
+    - 'New-AzBastion'
+    - 'Set-AzBastion'
+* Updated cmdlet 'Add-AzVirtualNetworkSubnetConfig', 'Set-AzVirtualNetworkSubnetConfig' and 'New-AzVirtualNetworkSubnetConfig' to support Network Identifier for Subnet Service Endpoint.
+* Added cmdlet 'Restart-AzNetworkVirtualAppliance' for allowing a restart of Network Virtual Appliance instances from the customer subscription.
+* Fixed a bug in 'Update-AzNetworkVirtualApplianceConnection'
+* Updated the Azure Firewall and Azure Firewall Policy setter for their respective Private Range properties
+  - Fixed a bug that prevented using /32 in private ranges on classic Azure Firewalls
+  - Updated the error message to provide a suggested private range when the supplied range is not correctly masked by the host identifier
+  - Added a new Allocate function for Azure Firewall that allows allocating customer public ip address to the firewall
+  - Fixed a bug that caused firewalls and policies to lose their private range property value when using their 'Get' cmdlets
+
+#### Az.Resources 7.2.0
+* Fixed 'Set-AzPolicyAssignment' loses description and Display Name [#25362]
+* Fixed 'New-AzPolicyAssignment' string ID value handling for parameter '-PolicyDefinition'
+* Fixed policy import issue with OP (requires serialization of null values)
+* Fixed '-Scope' parameter handling at resource instance level
+* Fixed error 'Get-AzPolicySetDefinition'cannot find matched parameter '-Name' [#25334]
+* Fixed serialization issue with empty arrays in PolicyParameterObject
+* Addressed a rare case where a service principal does not have AppId
+* Introduced validation of MG scoped deployment stack during New/Set cmdlet execution.
+* Updated Remove/New stack cmdlets with warnings for management groups ActionOnUnmanage and removed DeleteResourcesAndResourceGroups as valid ActionOnUnmanage value.
+* Supported get and assign versioned policy definitions and sets
+* Fixed syntax incompatible with windows powershell [#24971]
+* Fixed bug with 'Get-AzPolicyExemption' requesting 'ParentResourcePath'
+* Supported 'ServiceManagementReference' of Entra App
+    * 'Get-AzADApplication'
+    * 'New-AzADApplication'
+    * 'Update-AzADApplication'
+* Fixed deployment stack validation error surfacing.
+* Fixed default formatting for output objects
+* Removed '-InputObject' for
+    * 'Get-AzPolicyAssignment'
+    * 'Get-AzPolicyDefinition'
+    * 'Get-AzPolicyExemption'
+    * 'Get-AzPolicySetDefinition'
+    * 'New-AzPolicyAssignment'
+    * 'New-AzPolicyDefinition'
+    * 'New-AzPolicySetDefinition'
+* Implemented '-Version' and '-ListVersion' parameters on 'Get-AzPolicyDefinition' and 'Get-AzPolicySetDefinition'
+
+#### Az.Sql 5.1.0
+* Added cross-subscription support for 'Copy-AzSqlInstanceDatabase', 'Move-AzSqlInstanceDatabase'
+* Added new parameter SecondaryType to 'Add-AzSqlDatabaseFromFailoverGroup'
+
+#### Az.SqlVirtualMachine 2.3.0
+* Enabled Microsoft entra id on SQL VM.
+
+#### Az.Storage 7.1.0
+* Fixed the issue that Azure.Core.AccessToken is used before assigned.
+* Supported TLS1_3 when creating and updating a storage account 
+    - 'New-AzStorageAccount'
+    - 'Set-AzStorageAccount'
+* Fixed sync copy blob issue with -AsJob is specified [#25105]
+    - 'Copy-AzStorageBlob'
+* Updated Storage.Management.Sdk to support API version 2023-05-01
+* Updated 2 help examples of create storage account cmdlet, with MinimumTlsVersion as TLS1_2.
+    - 'New-AzStorageAccount'
+
+#### Az.StorageMover 1.4.0
+* Added input parameter validation set for UploadLimitWeeklyRecurrenceObject
+* Supported Uploaded Limit Schedule
+
+#### Az.Synapse 3.0.9
+* Updated Azure.Analytics.Synapse.Artifacts to 1.0.0-preview.20.
+* Fixed the issue that Azure.Core.AccessToken is used before assigned.
+
+### Thanks to our community contributors
+* Felipe Andrade (@andradf), Use named parameter for appPackageUrl in CreateOrUpdateApplicationTypeVersion (#25113)
+* JoshK (@jkonecki42), Update New-AzADGroupOwner.md (#25080)
+
 ## 12.0.0 - May 2024
 #### General
 * Fixed CVE-2024-29992.

documentation/SyntaxChangeLog/SyntaxChangeLog-Az12.md

@@ -1,3 +1,85 @@
+## 12.1.0 - July 2024
+#### Az.Compute 8.1.0 
+* Modified cmdlet `Add-AzVMDataDisk`
+   - Added parameter `-SourceResourceId`
+* Modified cmdlet `Update-AzDiskEncryptionSet`
+   - Added parameter `-IdentityType`
+* Removed cmdlet `Invoke-AzSpotPlacementRecommender`
+* Added cmdlet `Invoke-AzSpotPlacementScore`
+#### Az.Databricks 1.8.0 
+* Modified cmdlet `New-AzDatabricksWorkspace`
+   - Added parameters `-EnhancedSecurityMonitoringValue`, `-AutomaticClusterUpdateValue`, `-ComplianceSecurityProfileComplianceStandard`, `-ComplianceSecurityProfileValue`, `-AccessConnectorId`, `-AccessConnectorIdentityType`, `-AccessConnectorUserAssignedIdentityId`, `-DefaultStorageFirewall`
+* Modified cmdlet `Remove-AzDatabricksWorkspace`
+   - Added parameter `-ForceDeletion`
+* Modified cmdlet `Update-AzDatabricksWorkspace`
+   - Added parameters `-EnhancedSecurityMonitoringValue`, `-AutomaticClusterUpdateValue`, `-ComplianceSecurityProfileComplianceStandard`, `-ComplianceSecurityProfileValue`, `-AccessConnectorId`, `-AccessConnectorIdentityType`, `-AccessConnectorUserAssignedIdentityId`, `-DefaultStorageFirewall`
+#### Az.Functions 4.1.0 
+* Modified cmdlet `New-AzFunctionApp`
+   - Removed parameters `-DockerImageName`, `-DockerRegistryCredential`
+   - Added parameters `-Environment`, `-Image`, `-RegistryCredential`, `-WorkloadProfileName`, `-ResourceCpu`, `-ResourceMemory`, `-ScaleMaxReplica`, `-ScaleMinReplica`, `-RegistryServer`
+#### Az.Network 7.8.0 
+* Modified cmdlet `Add-AzLoadBalancerProbeConfig`
+   - Added parameter `-NoHealthyBackendsBehavior`
+* Modified cmdlet `Add-AzVirtualNetworkSubnetConfig`
+   - Added parameters `-NetworkIdentifier`, `-ServiceEndpointConfig`
+* Modified cmdlet `New-AzBastion`
+   - Added parameter `-EnableSessionRecording`
+* Modified cmdlet `New-AzLoadBalancerProbeConfig`
+   - Added parameter `-NoHealthyBackendsBehavior`
+* Modified cmdlet `New-AzVirtualNetworkSubnetConfig`
+   - Added parameters `-NetworkIdentifier`, `-ServiceEndpointConfig`
+* Modified cmdlet `Set-AzBastion`
+   - Added parameter `-EnableSessionRecording`
+* Modified cmdlet `Set-AzLoadBalancerProbeConfig`
+   - Added parameter `-NoHealthyBackendsBehavior`
+* Modified cmdlet `Set-AzVirtualNetworkSubnetConfig`
+   - Added parameters `-NetworkIdentifier`, `-ServiceEndpointConfig`
+* Added cmdlet `Deploy-AzFirewallPolicy`, `Get-AzFirewallPolicyDraft`, `Get-AzFirewallPolicyRuleCollectionGroupDraft`, `New-AzFirewallPolicyDraft`, `New-AzFirewallPolicyRuleCollectionGroupDraft`, `Remove-AzFirewallPolicyDraft`, `Remove-AzFirewallPolicyRuleCollectionGroupDraft`, `Restart-AzNetworkVirtualAppliance`, `Set-AzFirewallPolicyDraft`, `Set-AzFirewallPolicyRuleCollectionGroupDraft`
+#### Az.Resources 7.2.0 
+* Modified cmdlet `Get-AzPolicyAssignment`
+   - Removed parameter `-InputObject`
+* Modified cmdlet `Get-AzPolicyDefinition`
+   - Removed parameter `-InputObject`
+   - Added parameters `-ListVersion`, `-Version`
+* Modified cmdlet `Get-AzPolicyExemption`
+   - Removed parameter `-InputObject`
+* Modified cmdlet `Get-AzPolicySetDefinition`
+   - Removed parameter `-InputObject`
+   - Added parameters `-ListVersion`, `-Version`
+* Modified cmdlet `New-AzADApplication`
+   - Added parameter `-ServiceManagementReference`
+* Modified cmdlet `New-AzPolicyAssignment`
+   - Added parameter `-DefinitionVersion`
+* Modified cmdlet `New-AzPolicyDefinition`
+   - Removed parameter `-InputObject`
+* Modified cmdlet `New-AzPolicySetDefinition`
+   - Removed parameter `-InputObject`
+* Modified cmdlet `Update-AzADApplication`
+   - Added parameter `-ServiceManagementReference`
+#### Az.Sql 5.1.0 
+* Modified cmdlet `Add-AzSqlDatabaseToFailoverGroup`
+   - Added parameter `-SecondaryType`
+* Modified cmdlet `Complete-AzSqlInstanceDatabaseCopy`
+   - Added parameter `-TargetSubscriptionId`
+* Modified cmdlet `Complete-AzSqlInstanceDatabaseMove`
+   - Added parameter `-TargetSubscriptionId`
+* Modified cmdlet `Copy-AzSqlInstanceDatabase`
+   - Added parameter `-TargetSubscriptionId`
+* Modified cmdlet `Move-AzSqlInstanceDatabase`
+   - Added parameter `-TargetSubscriptionId`
+* Modified cmdlet `Stop-AzSqlInstanceDatabaseCopy`
+   - Added parameter `-TargetSubscriptionId`
+* Modified cmdlet `Stop-AzSqlInstanceDatabaseMove`
+   - Added parameter `-TargetSubscriptionId`
+#### Az.SqlVirtualMachine 2.3.0 
+* Modified cmdlet `Update-AzSqlVM`
+   - Added parameters `-ManagedIdentityClientId`, `-IdentityType`
+* Added cmdlet `Assert-AzSqlVMEntraAuth`
+#### Az.StorageMover 1.4.0 
+* Modified cmdlet `Update-AzStorageMoverAgent`
+   - Added parameter `-UploadLimitScheduleWeeklyRecurrence`
+* Added cmdlet `New-AzStorageMoverUploadLimitWeeklyRecurrenceObject`
+
 ## 12.0.0 - May 2024
 #### Az.Accounts 3.0.0 
 * Modified cmdlet `Clear-AzConfig`
@@ -797,3 +879,4 @@
 * Added cmdlet `Get-AzSupportChatTranscript`, `Get-AzSupportChatTranscriptsNoSubscription`, `Get-AzSupportCommunication`, `Get-AzSupportCommunicationsNoSubscription`, `Get-AzSupportFile`, `Get-AzSupportFilesNoSubscription`, `Get-AzSupportFileWorkspace`, `Get-AzSupportFileWorkspacesNoSubscription`, `Get-AzSupportOperation`, `Get-AzSupportTicketsNoSubscription`, `New-AzSupportCommunication`, `New-AzSupportCommunicationsNoSubscription`, `New-AzSupportFileAndUpload`, `New-AzSupportFileAndUploadNoSubscription`, `New-AzSupportFileWorkspace`, `New-AzSupportFileWorkspacesNoSubscription`, `New-AzSupportTicketsNoSubscription`, `Test-AzSupportCommunicationNameAvailability`, `Test-AzSupportCommunicationsNoSubscriptionNameAvailability`, `Test-AzSupportTicketNameAvailability`, `Test-AzSupportTicketsNoSubscriptionNameAvailability`, `Update-AzSupportTicketsNoSubscription`
 
 
+