bump(m365): bump terraform providers and image dependencies (#19)

* bump(m365): opa and azcopy versions

* bump(m365): azurerm and azuread tf providers

Author: jacdavi

m365/image/Dockerfile

@@ -3,10 +3,10 @@ SHELL ["powershell"]
 
 
 ARG SCUBAGEAR_VERSION=1.6.0
-ARG OPA_VERSION=1.6.0
+ARG OPA_VERSION=1.9.0
 # Get static URL for current version: curl -s -D- https://aka.ms/downloadazcopy-v10-windows | grep ^Location
 # https://learn.microsoft.com/en-us/azure/storage/common/storage-use-azcopy-v10?tabs=dnf#obtain-a-static-download-link
-ARG AZCOPY_URL=https://azcopyvnext-awgzd8g7aagqhzhe.b02.azurefd.net/releases/release-10.29.1-20250515/azcopy_windows_amd64_10.29.1.zip 
+ARG AZCOPY_URL=https://github.com/Azure/azure-storage-azcopy/releases/download/v10.30.1/azcopy_windows_amd64_10.30.1.zip 
 
 LABEL scubagear_version=${SCUBAGEAR_VERSION}
 

m365/terraform/env/example/provider.tf

@@ -3,11 +3,11 @@ terraform {
   required_providers {
     azurerm = {
       source  = "hashicorp/azurerm"
-      version = "~> 4.22.0"
+      version = "~> 4.46.0"
     }
     azuread = {
       source  = "hashicorp/azuread"
-      version = "~> 3.1.0"
+      version = "~> 3.6.0"
     }
   }
 

m365/terraform/modules/app/main.tf

@@ -18,7 +18,7 @@ resource "azurerm_key_vault" "vault" {
   enabled_for_deployment          = false
   enabled_for_disk_encryption     = false
   enabled_for_template_deployment = false
-  enable_rbac_authorization       = false
+  rbac_authorization_enabled      = false
 
   dynamic "network_acls" {
     for_each = var.allowed_access_ips == null && var.aci_subnet_id == null ? [] : [1]