release-2023-01-10

[Do not squash] release-2023-01-10

Author: isra-fel

.azure-pipelines/security-tools.yml

@@ -31,7 +31,7 @@ jobs:
     condition: eq(variables.IsGenerateBased, true)
     inputs:
       versionSpec: 14.17.1
-  
+
   - task: PowerShell@2
     displayName: Install autorest
     condition: eq(variables.IsGenerateBased, true)
@@ -54,6 +54,13 @@ jobs:
       scanFolder: SecurityTmp
       suppressionsFile: tools/SecurityTools/CredScanSuppressions.json
 
+  - task: PowerShell@2
+    displayName: Copy PDB for BinSkim
+    inputs:
+      targetType: inline
+      script: ./src/lib/pdb/CopyPdbToArtifacts.ps1
+      pwsh: true
+
   - task: securedevelopmentteam.vss-secure-development-tools.build-task-binskim.BinSkim@3
     displayName: Run BinSkim
     inputs:

ChangeLog.md

@@ -1,3 +1,101 @@
+## 9.3.0 - January 2023
+#### Az.Accounts
+* Supported Web Account Manager (WAM) as an opt-in interactive login experience. Enable it by 'Update-AzConfig -EnableLoginByWam True'.
+* Optimized the mechanism for assembly loading.
+* Enabled AzKeyStore with keyring in Linux.
+* Fixed a typo in GetAzureRmContextAutosaveSetting.cs changing the cmdlet class name to GetAzureRmContextAutosaveSetting
+* Removed survey on error message in 'Resolve-AzError'. [#20398]
+
+#### Az.Aks
+* Added parameter '-EnableEncryptionAtHost' for 'New-AzAksCluster' and 'New-AzAksNodePool'
+* Added parameter '-EnableUltraSSD' for 'New-AzAksCluster' and 'New-AzAksNodePool'
+* Added parameter '-NodeKubeletConfig' for 'New-AzAksCluster', '-KubeletConfig' for 'New-AzAksNodePool'
+* Added parameter '-NodeLinuxOSConfig' for 'New-AzAksCluster', '-LinuxOSConfig' and 'New-AzAksNodePool'
+* Added parameter '-NodeMaxSurge' for 'New-AzAksCluster', '-MaxSurge' for 'New-AzAksNodePool' and 'Update-AzAksNodePool'
+* Added parameter '-PPG' for 'New-AzAksCluster' and 'New-AzAksNodePool'
+* Added parameter '-SpotMaxPrice' for 'New-AzAksNodePool'
+* Added parameter '-EnableFIPS' for 'New-AzAksCluster' and 'New-AzAksNodePool'
+* Added parameter '-AutoScalerProfile' for 'New-AzAksCluster' and 'Set-AzAksCluster'
+* Added parameter '-GpuInstanceProfile' for 'New-AzAksCluster' and 'New-AzAksNodePool'
+* Added parameter '-EnableUptimeSLA' for 'New-AzAksCluster' and 'Set-AzAksCluster'
+* Added parameter '-EdgeZone' for 'New-AzAksCluster'
+
+#### Az.ApiManagement
+* Updated description of ResourceId param 'New-AzApiManagementBackend' and 'Set-AzApiManagementBackend' cmdlet [#16868]
+
+#### Az.ApplicationInsights
+* Enabled output object enumerating for 'Get-AzApplicationInsights' [#20225]
+
+#### Az.Automation
+* Updated Example: Start-AzAutomationRunbook should pass ordered dictionary for parameters [#20408]
+
+#### Az.Batch
+* Added new properties 'CurrentNodeCommunicationMode' (read only) and 'TargetCommunicationMode' of type 'NodeCommunicationMode' to 'PSCloudPool'.
+  - Valid values for 'NodeCommunicationMode': Default, Classic, Simplified
+  - When the 'PSCloudPool' is updated with a new 'TargetCommunicationMode' value, the Batch service will attempt to update the pool to the new value the next time the pool is resized down to zero compute nodes and back up.
+* 'PSPrivateLinkServiceConnectionState''s 'ActionRequired' property required has been renamed to 'ActionsRequired'. The old property has been marked as obsolete, and now just returns the new property. This should not impact existing consumers.
+
+#### Az.Compute
+* Removed the image 'Win2008R2SP1' from the list of available images and documentation. This image is no longer available on the backend so the client tools need to sync to that change.
+* Fixed a bug for creating Linux VM's from SIG/Community Gallery Images
+* Added 'ImageReferenceId' string parameter to the 'New-AzVmssConfig' cmdlet. This allows gallery image references to be added for the Confidential VM feature.
+* Added 'SecurityEncryptionType' and 'SecureVMDiskEncryptionSet' string parameters to the 'Set-AzVmssStorageProfile' cmdlet for the Confidential VM feature.
+
+#### Az.ContainerRegistry
+* Fixed bug in 'Get-AzContainerRegistryTag' to show correct tags [#20528]
+
+#### Az.Monitor
+* Fixed bug for 'Remove-AzDataCollectionRuleAssociation' [#20207]
+* Added support for test notifications cmdlets
+  * 'Test-AzActionGroup'
+* Fixed start time parameter description of 'Get-AzActivityLog' [#20409]
+
+#### Az.Network
+* Added samples for retrieving Private Link IP Configuration using 'New-AzApplicationGatewayPrivateLinkIpConfiguration' with fix [#20440]
+* Added 'DdosProtectionPlan' property in 'AzPublicIpAddress'
+* Updated mapping in 'AzPublicIpAddress' to always show/create DdosSettings
+* Fixed a bug that added Ddos related properties when viewing PublicIpAddress and DdosProtectionPlan objects
+* Fixed a Bug for Set-AzIpGroup cmdlet to support the '-WhatIf' parameter
+* Fixed a Bug for 'Add-AzLoadBalancerFrontendIpConfig', 'Add-AzLoadBalancerProbeConfig', 'Add-AzLoadBalancerBackendAddressPoolConfig', 'Set-AzLoadBalancer', 'New-AzLoadBalancerRuleConfig', 'Remove-AzLoadBalancerInboundNatRuleConfig' cmdlets to support the '-WhatIf' parameter. [#20416]
+* Fixed a bug for DestinationPortBehavior in 'Get-AzNetworkWatcherConnectionMonitor', 'New-AzNetworkWatcherConnectionMonitor' powershell command by adding this properties to get and set the DestinationPortBehavior information. [#15996]
+
+#### Az.RedisCache
+* Added optional parameter 'PreferredDataArchiveAuthMethod' in 'Export-AzRedisCache'  
+* Added optional parameter 'PreferredDataArchiveAuthMethod' in 'Import-AzRedisCache'  
+* Added 4 additional properties for a geo replication link: 'PrimaryHostName', 'GeoReplicatedPrimaryHostName', 'ServerRole', and 'LinkedRedisCacheLocation'in 'Get-AzRedisCacheLink' and 'New-AzRedisCacheLink' 
+
+#### Az.Resources
+* Fixed issue introduced in previous fix for 'Set-AzPolicySetDefinition' InternalServerError when the initiative is too large [#20238], which will remove space in value.
+* Fixed 'Get-AzRoleAssignment' BadRequest when scope is '/' [#20323]
+
+#### Az.SecurityInsights
+* Fixed for 'Update-AzSentinelAlertRule' fails when using '-TriggerThreshold 0' [#20417]
+
+#### Az.Sql
+* Added a parameter named 'UseIdentity' for 'Set-AzSqlServerAudit', 'Set-AzSqlDatabaseAudit', 'Set-AzSqlServerMSSupportAudit'
+* Added 'IsManagedIdentityInUse' property to the output of 'Get-AzSqlServerMSSupportAudit'
+* Added 'PreferredEnclaveType' parameter to 'New-AzSqlDatabase', 'Get-AzSqlDatabase' and 'Set-AzSqlDatabase' cmdlet
+
+#### Az.StackHCI
+* Added support for arc extensions which depend on HCI cluster's IMDS endpoints.
+
+#### Az.Storage
+* Return ListBlobProperties in blob list result
+    - 'Get-AzStorageBlob'
+* Output AllowedCopyScope in get account result
+    - 'Get-AzStorageAccount'
+
+#### Az.Websites
+* Fixed 'Import-AzWebAppKeyVaultCertificate' to use certificate naming convention same as portal [#19592]
+
+### Thanks to our community contributors
+* Pavel Lyalyakin (@bahrep), New-AzDiskConfig.md: fixed a copy-pasto (#20514)
+* Eugene Ogongo (@eugeneogongo), Update Images.json (#18654)
+* Hiroshi Yoshioka (@hyoshioka0128), Typo "resouce"→"resource" (#20441)
+* Paul Gledhill (@pmgledhill102), Spelling mistake 'Accpeted' (#20380)
+* Cameron Sowder (@sowderca), Fixed typo in Get-AzContextAutosaveSetting class name: GetzureRmContextAutosaveSetting -> GetAzureRmContextAutosaveSetting (#20420)
+
+
 ## 9.2.0 - December 2022
 #### Az.Accounts
 * Enabled caching tokens when logging in with a client assertion. This fixed the incorrectly short lifespan of tokens.

documentation/breaking-changes/upcoming-breaking-changes.md

@@ -421,7 +421,7 @@
 ### `Get-AzNetAppFilesVault`
 
 - Cmdlet breaking-change will happen to all parameter set
-  - The output type is changing from the existing type :'Microsoft.Azure.Commands.NetAppFiles.Models.PSNetAppFilesBackupPolicy' to the new type :'PSNetAppFilesVault'
+  - The cmdlet is being deprecated. There will be no replacement for it.
 
 ### `New-AzNetAppFilesBackupPolicy`
 

setup/generate.ps1

@@ -37,7 +37,7 @@ if( (-not (get-command -ea 0 light)) -or (-not (get-command -ea 0 heat)) -or (-n
 $outputName ="Az-Cmdlets"
 
 # generate the product name from the current month/year.
-$productName = "Microsoft Azure PowerShell - December 2022"
+$productName = "Microsoft Azure PowerShell - January 2023"
 
 # where to put temp files
 $tmp = Join-Path $env:temp azure-cmdlets-tmp

src/Accounts/Accounts/Az.Accounts.psd1

@@ -3,7 +3,7 @@
 #
 # Generated by: Microsoft Corporation
 #
-# Generated on: 01/12/2022
+# Generated on: 1/6/2023
 #
 
 @{
@@ -12,7 +12,7 @@
 # RootModule = ''
 
 # Version number of this module.
-ModuleVersion = '2.10.4'
+ModuleVersion = '2.11.0'
 
 # Supported PSEditions
 CompatiblePSEditions = 'Core', 'Desktop'
@@ -56,7 +56,7 @@ DotNetFrameworkVersion = '4.7.2'
 # RequiredModules = @()
 
 # Assemblies that must be loaded prior to importing this module
-RequiredAssemblies = 'Microsoft.Azure.PowerShell.AssemblyLoading.dll',
+RequiredAssemblies = 'Microsoft.Azure.PowerShell.AssemblyLoading.dll', 
                'Microsoft.Azure.PowerShell.Authentication.Abstractions.dll', 
                'Microsoft.Azure.PowerShell.Authentication.dll', 
                'Microsoft.Azure.PowerShell.Authenticators.dll', 
@@ -147,10 +147,11 @@ PrivateData = @{
         # IconUri = ''
 
         # ReleaseNotes of this module
-        ReleaseNotes = '* Enabled caching tokens when logging in with a client assertion. This fixed the incorrectly short lifespan of tokens.
-* Upgraded target framework of Microsoft.Identity.Client to net461 [#20189]
-* Stored ''ServicePrincipalSecret'' and ''CertificatePassword'' into ''AzKeyStore''.
-* Updated the reference of Azure PowerShell Common to 1.3.67-preview.'
+        ReleaseNotes = '* Supported Web Account Manager (WAM) as an opt-in interactive login experience. Enable it by ''Update-AzConfig -EnableLoginByWam True''.
+* Optimized the mechanism for assembly loading.
+* Enabled AzKeyStore with keyring in Linux.
+* Fixed a typo in GetAzureRmContextAutosaveSetting.cs changing the cmdlet class name to GetAzureRmContextAutosaveSetting
+* Removed survey on error message in ''Resolve-AzError''. [#20398]'
 
         # Prerelease string of this module
         # Prerelease = ''

src/Accounts/Accounts/ChangeLog.md

@@ -19,6 +19,9 @@
 -->
 
 ## Upcoming Release
+
+## Version 2.11.0
+* Supported Web Account Manager (WAM) as an opt-in interactive login experience. Enable it by `Update-AzConfig -EnableLoginByWam $true`.
 * Optimized the mechanism for assembly loading.
 * Enabled AzKeyStore with keyring in Linux.
 * Fixed a typo in GetAzureRmContextAutosaveSetting.cs changing the cmdlet class name to GetAzureRmContextAutosaveSetting

src/Accounts/Accounts/Properties/AssemblyInfo.cs

@@ -43,8 +43,8 @@
 // You can specify all the values or you can default the Build and Revision Numbers 
 // by using the '*' as shown below:
 
-[assembly: AssemblyVersion("2.10.4")]
-[assembly: AssemblyFileVersion("2.10.4")]
+[assembly: AssemblyVersion("2.11.0")]
+[assembly: AssemblyFileVersion("2.11.0")]
 #if !SIGN
 [assembly: InternalsVisibleTo("Microsoft.Azure.PowerShell.Cmdlets.Accounts.Test")]
 #endif

src/Accounts/Accounts/Utilities/CommandMappings.json

@@ -2081,12 +2081,17 @@
     "Az.DigitalTwins": {
       "Get-AzDigitalTwinsEndpoint": {},
       "Get-AzDigitalTwinsInstance": {},
-      "New-AzDigitalTwinsCheckNameRequestObject": {},
-      "New-AzDigitalTwinsDigitalTwinsIdentityObject": {},
+      "Get-AzDigitalTwinsPrivateEndpointConnection": {},
+      "Get-AzDigitalTwinsPrivateLinkResource": {},
+      "Get-AzDigitalTwinsTimeSeriesDatabaseConnection": {},
       "New-AzDigitalTwinsEndpoint": {},
       "New-AzDigitalTwinsInstance": {},
+      "New-AzDigitalTwinsPrivateEndpointConnection": {},
+      "New-AzDigitalTwinsTimeSeriesDatabaseConnection": {},
       "Remove-AzDigitalTwinsEndpoint": {},
       "Remove-AzDigitalTwinsInstance": {},
+      "Remove-AzDigitalTwinsPrivateEndpointConnection": {},
+      "Remove-AzDigitalTwinsTimeSeriesDatabaseConnection": {},
       "Test-AzDigitalTwinsInstanceNameAvailability": {},
       "Update-AzDigitalTwinsInstance": {}
     },
@@ -3380,6 +3385,7 @@
       "Set-AzNetAppFilesAccount": {},
       "Update-AzNetAppFilesAccount": {},
       "Get-AzNetAppFilesPool": {},
+      "Update-AzNetAppFilesAccountCredential": {},
       "New-AzNetAppFilesPool": {},
       "Update-AzNetAppFilesPool": {},
       "Set-AzNetAppFilesPool": {},
@@ -3397,7 +3403,9 @@
       "Suspend-AzNetAppFilesReplication": {},
       "Remove-AzNetAppFilesReplication": {},
       "Initialize-AzNetAppFilesReplication": {},
+      "Restore-AzNetAppFilesReplication": {},
       "Resume-AzNetAppFilesReplication": {},
+      "Get-AzNetAppFilesVolumeReplication": {},
       "Restore-AzNetAppFilesVolume": {},
       "Set-AzNetAppFilesVolumePool": {},
       "New-AzNetAppFilesSnapshotPolicy": {},
@@ -3432,11 +3440,17 @@
       "Remove-AzNetAppFilesVolumeGroup": {},
       "New-AzNetAppFilesExportPolicyRuleObject": {},
       "New-AzNetAppFilesExportPolicyObject": {},
+      "Reset-AzNetAppFilesVolumeCifsPassword": {},
+      "Get-AzNetAppFilesVolumeQuotaRule": {},
+      "New-AzNetAppFilesVolumeQuotaRule": {},
+      "Update-AzNetAppFilesVolumeQuotaRule": {},
+      "Remove-AzNetAppFilesVolumeQuotaRule": {},
       "Get-AnfAccount": {},
       "New-AnfAccount": {},
       "Remove-AnfAccount": {},
       "Set-AnfAccount": {},
       "Update-AnfAccount": {},
+      "Update-AnfAccountCredential": {},
       "Get-AnfPool": {},
       "New-AnfPool": {},
       "Set-AnfPool": {},
@@ -3455,6 +3469,8 @@
       "Suspend-AnfReplication": {},
       "Remove-AnfReplication": {},
       "Resume-AnfReplication": {},
+      "Restore-AnfReplication": {},
+      "Get-AnfVolumeReplication": {},
       "Restore-AnfVolume": {},
       "Initialize-AnfReplication": {},
       "Set-AnfVolumePool": {},
@@ -3487,7 +3503,12 @@
       "Update-AnfSubvolume": {},
       "Get-AnfVolumeGroup": {},
       "New-AnfVolumeGroup": {},
-      "Remove-AnfVolumeGroup": {}
+      "Remove-AnfVolumeGroup": {},
+      "Reset-AnfVolumeCifsPassword": {},
+      "Get-AnfVolumeQuotaRule": {},
+      "New-AnfVolumeQuotaRule": {},
+      "Update-AnfVolumeQuotaRule": {},
+      "Remove-AnfVolumeQuotaRule": {}
     },
     "Az.Network": {
       "Add-AzApplicationGatewayAuthenticationCertificate": {},
@@ -6550,6 +6571,21 @@
       "Update-AzVMwarePlacementPolicy": {},
       "Update-AzVMwarePrivateCloud": {}
     },
+    "Az.VoiceServices": {
+      "Get-AzVoiceServicesCommunicationsContact": {},
+      "Get-AzVoiceServicesCommunicationsGateway": {},
+      "Get-AzVoiceServicesCommunicationsTestLine": {},
+      "New-AzVoiceServicesCommunicationsContact": {},
+      "New-AzVoiceServicesCommunicationsGateway": {},
+      "New-AzVoiceServicesCommunicationsGatewayServiceRegionObject": {},
+      "New-AzVoiceServicesCommunicationsTestLine": {},
+      "Remove-AzVoiceServicesCommunicationsContact": {},
+      "Remove-AzVoiceServicesCommunicationsGateway": {},
+      "Remove-AzVoiceServicesCommunicationsTestLine": {},
+      "Update-AzVoiceServicesCommunicationsContact": {},
+      "Update-AzVoiceServicesCommunicationsGateway": {},
+      "Update-AzVoiceServicesCommunicationsTestLine": {}
+    },
     "Az.Websites": {
       "Get-AzAppServicePlan": {},
       "Set-AzAppServicePlan": {},

src/Accounts/Accounts/help/Clear-AzConfig.md

@@ -22,7 +22,8 @@ Clear-AzConfig [-Force] [-PassThru] [-AppliesTo <String>] [-Scope <ConfigScope>]
 ```
 Clear-AzConfig [-PassThru] [-AppliesTo <String>] [-Scope <ConfigScope>]
  [-DefaultProfile <IAzureContextContainer>] [-WhatIf] [-Confirm] [-DefaultSubscriptionForLogin]
- [-DisplayBreakingChangeWarning] [-DisplaySurveyMessage] [-EnableDataCollection] [<CommonParameters>]
+ [-DisplayBreakingChangeWarning] [-DisplaySurveyMessage] [-EnableDataCollection] [-EnableLoginByWam]
+ [<CommonParameters>]
 ```
 
 ## DESCRIPTION
@@ -145,6 +146,24 @@ Accept pipeline input: False
 Accept wildcard characters: False
 ```
 
+### -EnableLoginByWam
+\[Preview\] When enabled, Web Account Manager (WAM) will be the default interactive login experience.
+It will fall back to using the browser if the platform does not support WAM.
+Note that this feature is under preview. Microsoft Account (MSA) is currently not supported.
+Feel free to reach out to Azure PowerShell team if you have any feedbacks: https://aka.ms/azpsissue
+
+```yaml
+Type: System.Management.Automation.SwitchParameter
+Parameter Sets: ClearByKey
+Aliases:
+
+Required: False
+Position: Named
+Default value: None
+Accept pipeline input: False
+Accept wildcard characters: False
+```
+
 ### -Force
 Do not ask for confirmation when clearing all configs.
 
@@ -183,7 +202,7 @@ By default it is CurrentUser.
 Type: Microsoft.Azure.PowerShell.Common.Config.ConfigScope
 Parameter Sets: (All)
 Aliases:
-Accepted values: CurrentUser, Process
+Accepted values: CurrentUser, Process, Default, Environment
 
 Required: False
 Position: Named

src/Accounts/Accounts/help/Connect-AzAccount.md

@@ -251,6 +251,21 @@ Account                     SubscriptionName TenantId                        Env
 xxxxxxxx-xxxx-xxxx-xxxxxxxx Subscription1    yyyyyyyy-yyyy-yyyy-yyyy-yyyyyyy AzureCloud
 ```
 
+### Example 10: Connect interactively using WAM
+
+This example demonstrates how to enable the config for WAM (Web Account Manager) and use it to connect to Azure.
+
+```powershell
+Update-AzConfig -EnableLoginByWam $true
+Connect-AzAccount
+```
+
+```Output
+Account                     SubscriptionName TenantId                        Environment
+-------                     ---------------- --------                        -----------
+xxxxxxxx-xxxx-xxxx-xxxxxxxx Subscription1    yyyyyyyy-yyyy-yyyy-yyyy-yyyyyyy AzureCloud
+```
+
 ## PARAMETERS
 
 ### -AccessToken