Azure/ResourceModules v0.11.0

on GitHub

Highlights

📯BREAKING CHANGE: Update to the name with which modules are published
As per the alignment with the Public Bicep Registry described below, the identifier for published modules changes.

❗ Note: To keep the disruption for users of the CI environment at a minimum, we introduced a new setting useApiSpecsAlignedName in the settings.yml. By default, a new naming will be used. To keep on using the previous naming, you must switch this setting to true.

📯BREAKING CHANGE: Public Bicep Registry focused file & folders changes

• Renamed deploy.bicep to main.bicep
• Renamed deploy.test.bicep to main.test.bicep
• Renamed readme.md to README.md
• Renamed all module names to singular & lower case
• Removed the Microsoft. prefix from the provider namespace folders
• Added metadata content to module templates
• Added main.json template
• Updated version.json schema to the Public Bicep Registry standard

📯BREAKING CHANGE: Retired Diagnostic Logs Retention Policy across all modules (ref)

Modules

• New modules:
  • compute/ssh-public-key
  • digital-twins/digital-twins-instance
  • insights/webtest
  • network/dns-zone (public DNS Zone)
  • network/express-route-gateway
  • network/front-door-web-application-firewall-policy
  • network/service-endpoint-policies
  • relay/namespace
  • network/dns-forwarding-ruleset
  • resource-graph/query
  • search/search-service
• Several new child modules, including:
  • sql/server/encryption-protector
  • synapse/workspace/integration-runtime
  • web/site/basic-publishing-credentials-policy
  • container-registry/registry/cache-rule
  • managed-identity/user-assigned-identity/federatedIdentity-credential
• API Management: Added additional types graphql & websocket
• Application Gateway: Adjusted sslPolicy based on policy type
• Application Insights: Added Diagnostic Settings
• Azure Container Registry: Updated test case to support Paired region dependencies
• Azure Data Factory:
  • Added support for GitHub Enterprise Server
  • Added gitDisablePublish parameter
• Azure Firewall: Added Basic SKU support
• Azure Front Door: Added missing SKUs
• Azure Kubernetes Cluster:
  • Added ingressProfile support
  • Added support to provide a Private DNS Zone for usage
  • Added support for additional parameters
• Bastion: Added new parameters
• Cosmos DB:
  • Enabled free tier
  • Added additional parameters to SQL API container
  • Added private endpoint support
• Databricks: Enabled Customer-Managed-Keys, Private Endpoints & additional parameters
• Deployment Script
  • Added support for using existing storage account
  • Added environment variables parameter & added support for outputs
• DNS Forwarding RuleSet: Simplified DNS Forwarding Rule Input Parameter
• EventHub: Added additional parameters
• Health Bot: Added support for user-assigned identities
• Storage Account:
  • Added new feature sasPolicy to Storage Account module
  • Added accessTier parameter for file shares
• Redis Cache: Added parameters to specify zone redundancy and availability zones
• NetApp Account: Added support for user-assigned identities
• Synapse Workspace:
  • Added workspaceRepositoryConfiguration property
  • Updated CMK interface
• SQL Server: Expanded test to support dynamic location parameter for Maintenance Configuration
• Virtual Machine:
  • Enabled tags on extensions
  • Added support for custom computer name
  • Simplified LAW reference
• User-Assigned Identity: Added clientId output
• Network Connection: Added support for authorizationKey
• Operational Insights Workspace: Added support for Capacity Reservation

• Azure Virtual Desktop Host Pool: Expanded agentUpdate interface

• Diverse: Updated modules to latest API Version
• Diverse: Streamlined several parameter names (e.g., shortened the name if parts of the name were self-evident)
• Diverse: Enabled null on DiagnosticLogCategoriesToEnable parameter to enable no logs to be collected.
• Diverse: Added new test features (e.g., cidrSubnet() function)
• Diverse: Addressed serveral PSRule findings
• Diverse: Support both location input and subnet location reference in modules using the Private Endpoint module

CI Environment

• Added Deploy to Azure button targeting the now required main.json templates
• Added cross-module reference pipeline triggers, added corresponding Pester test & aligned API Management module
• Introduce custom Pester results section to GitHub workflow runs
• Removed the logic retrieving the deployment SP object ID and replacing it in <> token occurrences. The logic is not needed anymore since tests are now using a dependency msi.
• Removed Az login step from Pester static validation jobs
• Updated SetEnvironment action to avoid setting up runners twice
• Renamed linter pipeline to show it is optional
• Introduced a test that tests that a main.json exists and is aligned with the latest main.bicep
• Replaced default namePrefix to align with latest GitHub syntax requirements
• Updated the module table generation
• Fixed Pester test result output table
• Added logic to retrieve main resource type leveraging API Specs JSON
• Improved robustness of registry publishing logic
• Added Azure context configuration to diverse tasks
• Enabled the usage of both the old published module name, as well as the new PBR-aligned

Fixes

• App Service Environment: Fixed issue where ASE subsequent deployments fail after initial successful one
• Application Gateway:
  • Fixed max length validation of name
  • Fixed globalConfiguration property logic
• Automation Account: Fixed variables value bug
• Cognitive Services: Fix for Customer Managed Keys
• Databricks: Improved test robustness by auto-fetching paired regions
• DNS Resolver: Fixed references of RBAC resource
• Event Grid:
  • Enabled Event Subscriptions for both topics & system topics
  • Fixed incorrect eventSubscription passthrough
• Event Hub:
  • Fixed role assignment naming issues
  • Fixed excess character in nested_roleAssignments.bicep
• ExpressRouteGateway:
  • Updated pipeline name to align with naming convention
  • Fixed RBAC handling, added lock capability & added min test
• Firewall Policy: Removed unsupported system-assigned identity
• Purview: Aligned target location with currently supported set
• Recover Services Vault: Fixed protection-container child reference
• NAT Gateway: Fixed dependsOn condition
• Service Bus Namespace: Fixed bug in test case
• Storage Account: Fixed isNfsV3Enabled parameter handling
• SQL Server:
  • Fixed location param passthrough
  • Updated minCapacity default value for elasticpools
• Synapse Workspace: Update Storage Account input parameter storageAccountName to storageAccountResourceId
• Virtual Machine: Updated cross reference to updated Recovery Services Vault module
• Virtual Network Gateway: Fixed parameter handling for vpnAuthenticationTypes & vpnClientProtocols
• VPN Gateway: Fixed vpnConnections child reference
• Diverse: Fixed diverse link references
• Machine Learning Workspace:
  • Added missing purge to test instance removal
  • Added waiting on Private Endpoints before creating compute instances
• CI: Fixed that a pre-release publishing won't cause actual versions to be published if there has not been any previous release
• CI: Align GH removal conditions with ADO
• CI: Addressed latest name changes in module table generation script
• CI: Fixed module overview table generation
• CI: Updated deployment search to not prematurely throw an exception
• CI: Updated ADO pipeline conditions to make it impossible to publish on canceled job
• CI: Fixed issues when both main.bicep & main.json exist

Utilities

• Updated token handling for readme examples
• Updated Bicep to ARM conversion script
• Added 'required module' to Set-ModuleReadMe.ps1 script
• Aligned with latest file & folder changes
• Added logic to pull module names & descriptions from metadata in template

Wiki

• Added a step by step "how to create a solution"
• Added guidelines to troubleshoot outdated Bicep versions
• Incorporated feedback of contributors
• Updated all wiki sections to latest changes (e.g., naming convention)
• Fix typos

Tested with version(s)

• Bicep: 0.20.4
• Powershell: 7.3.6
• Az CLI: 2.51.0

New Contributors

• @mVermaat made their first contribution in #3046
• @jhueppauff made their first contribution in #3025
• @samuelya made their first contribution in #3128
• @SvenAelterman made their first contribution in #3199
• @Robbertbbb made their first contribution in #3290
• @paggarwalmsft made their first contribution in #3348
• @clarked-msft made their first contribution in #3266
• @jeremytbrun made their first contribution in #3307
• @Ellestad1995 made their first contribution in #3376
• @suspand made their first contribution in #3380
• @algattik made their first contribution in #3420
• @hip9k made their first contribution in #3421
• @ThojoUno made their first contribution in #3582

All merged PRs

Full Changelog: v0.10.0...v0.11.0

• [Modules] Reduced length of deployment name by @mVermaat in #3046
• [Modules] StorageAccounts - new feature - sasPolicy by @shawntmeyer in #3028
• [Modules] Deployment Script module: adding support for using existing storage account by @lsnoddy in #3045
• [Modules] Reduce parameter names to necessary baseline by @AlexanderSehr in #2976
• [CI Environment] CODEOWNERS - Fix codeowners based on team rename by @MariusStorhaug in #3054
• [Modules] ApplicationGateway - Adjusting sslPolicy based on policy type by @MariusStorhaug in #3053
• [Modules] Updated Automation Account to latest API Version (2022-08-08), fixed Variables value bug by @ahmadabdalla in #3058
• [CI Environment] Added cross-module reference pipeline triggers, added corresponding Pester test & aligned API Management module by @AlexanderSehr in #3048
• [Modules] Added SQL Protector for SQL Server by @jhueppauff in #3025
• [Modules] Updated Deployment script environment variables parameter and added support for outputs by @ahmadabdalla in #3069
• [Wiki] Added a step by step "how to create a solution" by @AlexanderSehr in #3047
• [CI Environment] Introduce custom Pester results section to GitHub workflow runs by @AlexanderSehr in #3074
• [Modules] New Module: Network/ExpressRouteGateway for Virtual Hub Connectivity by @fblix in #2888
• [Modules] New module Microsoft.Insights webtests by @shaban-khan in #3042
• [Modules] New child 'basicPublishingCredentialsPolicies' module for Web - Sites by @shaban-khan in #3087
• [CI Environment] Remove implementation retrieving deploymentSpId by @eriqua in #3082
• [Fixes] Sql servers readme update by @eriqua in #3084
• [CI Environment] PSRule fix tags suppression group and add tags to purview by @eriqua in #3086
• [Modules] SynapseWorkspaces add workspaceRepositoryConfiguration property in #3093
• [CI Environment] Removing Az login step from Pester static validation jobs by @eriqua in #3095
• [Modules] New module Azure Digital Twins and child endpoint by @ryanmstephens in #3039
• [CI Environment] Updated SetEnvironment action to avoid setting up runners twice by @eriqua in #3096
• [Fixes] Updated ReadMe's of Digital Twins module by @AlexanderSehr in #3099
• [Modules] Updated Blob Services for Storage Account Module to latest API and added new parameters by @ahmadabdalla in #3100
• [Modules] Remove array tags from properties by @Sdelausnay in #2618
• [Modules] Updated more parameters & added test case by @AlexanderSehr in #3109
• [CI Environment] Add template for question issue by @eriqua in #3111
• [CI Environment] Enforce opening issues through template by @eriqua in #3112
• [Modules] New Microsoft.Compute/sshPublicKey by @shawntmeyer in #2673
• [Modules] Add tags on VM extensions. Fixes #3115 by @davidkarlsen in #3116
• [Modules] SSHPublicKeys pipeline update by @eriqua in #3129
• [Modules] Fix readme and add tags to VM extension examples by @eriqua in #3130
• [Modules] DocumentDB - Add enable free tier tag to cosmos db properties by @samuelya in #3128
• [Modules] Added Public DNS Zone Module by @ahmadabdalla in #3102
• [Modules] Update User Managed Identity module to output Client ID (Application ID) by @davidkarlsen in #3138
• [Wiki] Added guidelines to troubleshoot outdated Bicep versions by @AlexanderSehr in #3148
• [CI Environment] Renamed linter pipline to show it is optional by @AlexanderSehr in #3151
• [CI Environment] Add disclaimer to warn about upcoming breaking changes by @AlexanderSehr in #3152
• [Modules] Updated Cosmos DB SQL API containers child module with new parameters by @ahmadabdalla in #3103
• [Modules] Virtual Machine module: adding support for a custom computer name by @krbar in #3036
• [Wiki] Incorporated feedback of contributor by @AlexanderSehr in #3156
• [Modules] Added support for ExpressRoute circuit authorization code by @AlexanderSehr in #3163
• [Modules] Synapse workspaces Added support for resourceId by @AlexanderSehr in #3164
• [Modules] [BPR alignment] Rename deploy.bicep to main.bicep and deploy.test.bicep to main.test.bicep by @eriqua in #3049
• [Modules] [BPR alignment] Remove Microsoft. prefix and rename README.md files - part 1/2 by @eriqua in #3165
• [Modules] [BPR alignment] Remove Microsoft. prefix and rename README.md files - part 2/2 by @eriqua in #3189
• [Fixes] Addressed latest name changes in module table generation script by @AlexanderSehr in #3197
• [Modules] Correct max length of Application Gateway name by @SvenAelterman in #3199
• [Fixes] Update EventHub nested_roleAssignments.bicep by @oliverlabs in #3243
• [Modules] Updated Private Link Services module to the newest API by @krbar in #3247
• [Modules] Updated ApplicationGateway WAF Policies Module to latest API by @krbar in #3246
• [Modules] Updated Bastion Hosts to latest API and added new parameter by @krbar in #3245
• [Modules] Updated the DocumentDB to the newest API by @krbar in #3248
• [Fixes] Fixed the description of 2 parameters by @AlexanderSehr in #3169
• [Modules] New child module for Synapse workspace Integration Runtime by @tyconsulting in #3194
• [Modules] Updated the DbForMySQL/FlexibleServers to the newest API by @krbar in #3258
• [Modules] Cognitive Services accounts - CMK fix + API update by @krbar in #3259
• [Modules] [BPR alignment] kebab-case module folder naming by @eriqua in #3264
• [Modules] Update Diagnostic Settings for PostgreSql Flexible Servers diag by @tyconsulting in #3279
• [Modules] Update Synapse Diagnostic Logs by @tyconsulting in #3276
• [Modules] [BPR alignment] Updated version files to PBR standard by @AlexanderSehr in #3267
• [Modules] Fix Bug to enable event subscriptions for topics and also system topics by @rahalan in #3281
• [Modules] Add AppInsights Diagnostic Settings by @tyconsulting in #3277
• [Wiki] Added prerequisites section by @AlexanderSehr in #3286
• [Modules] Introduced metadata.json file by @AlexanderSehr in #3275
• [Modules] storage account module : conditional nfsv3 parameter by @Robbertbbb in #3290
• [Modules] Updated Test Files & ReadMe function to compensate for change (1/2) by @AlexanderSehr in #3283
• [Fixes] Align input child parameter objects to resourceType casing by @eriqua in #3313
• [Fixes] Fixing new param name in tests by @eriqua in #3314
• [CI Environment] Moved pipeline badges by @AlexanderSehr in #3287
• [Fixes] Fix sql and purview tests by @eriqua in #3315
• [Modules] fixed telemetry default value by @elanzel in #3329
• [Modules] Update Api Versions by @fblix in #3328
• [Modules] Format the metadata.json and aligned the Name and Description for all Modules and Updated Readme by @ahmadabdalla in #3309
• [Modules] Updated Healthbot Module to latest API version and added support for user identities by @ahmadabdalla in #3343
• [Modules] Fixing issue where ASE subsequent deployments fail after initial successful one by @ahmadabdalla in #3340
• [Modules] Added support for Capacity Reservation for the Log Analytics Workspace Module by @ahmadabdalla in #3345
• [Modules] Restored Document DB Readme after recent wider Readme updates by @ahmadabdalla in #3344
• [Wiki] Update Getting started - Scenario 1 Consume library.md by @paggarwalmsft in #3348
• [Fixes] Fixed WhatIf output on databases when nested deploying using server module by @thofle in #3323
• [Wiki] Update Getting started - Scenario 1 Consume library.md by @paggarwalmsft in #3349
• [Modules] API Management allowed values update by @clarked-msft in #3266
• [Modules] Update Event Grid Module - Fix typo, not checking on loop-item by @davidkarlsen in #3357
• [Modules] Updated Redis Cache Module - Added parameters to specify zone redundancy and availability zones by @lsnoddy in #3354
• [Modules] New module - Service Endpoint Policy by @tyconsulting in #3289
• [Modules] Updated Service Endpoints Policy Module - Follow up by @ahmadabdalla in #3358
• [Modules] Added PBR test files & tests (2/2) by @AlexanderSehr in #3285
• [Modules] New Module - Relay Namespaces by @jeremytbrun in #3307
• [Modules] Updated Relay Namespace Module to align with new Bicep Test file changes by @ahmadabdalla in #3370
• [Modules] Updated Data Protection Backup Vaults Module API Version by @ahmadabdalla in #3371
• [Modules] Updated NetApp Module to support User Assigned Identities by @ahmadabdalla in #3347
• [Modules] [PBR alignment] Add the generation of the main.json ARM template by @eriqua in #3359
• [Modules] Updated Event Hubs Module to latest API version, and enabled new features by @ahmadabdalla in #3352
• [Fixes] Reference the correct RBAC resource (dnsResolvers) by @Ellestad1995 in #3376
• [Fixes] Updated a "depends on" condtion on natgateway for pip address by @suspand in #3380
• [Modules] Re-introduce Deploy to Azure button + adding missing main.json files by @AlexanderSehr in #3381
• [Modules] Storage Accounts module - added 'accessTier' parameter for file shares by @krbar in #3260
• [CI Environment] Re-Enabled PBR overwrite by @AlexanderSehr in #3388
• [CI Environment] Introduced a test that tests that a main.json exists and is aligned with the latest main.bicep by @AlexanderSehr in #3384
• [Fixes] DBforMySQL flexibleServers Readme update by @eriqua in #3398
• [Modules] SqlMi - Enable purge protection on cmk dep kv by @eriqua in #3399
• [CI Environment] Machine Learning Workspaces Custom Deletion by @eriqua in #3400
• [Fixes] Fixed module overview table generation by @AlexanderSehr in #3408
• [Modules] Updated ServiceBus Namespace NetworkRuleSets Module - Fixed bug in variable object by @lsnoddy in #3409
• [Modules] Simplified LAW reference in VM module by @AlexanderSehr in #3410
• [Modules] Create module for Microsoft.Network/dnsForwardningRulesets by @JPEasier in #3149
• [Modules] Azure Data Factory: Support for GitHub Enterprise Server by @algattik in #3420
• [CI Environment] Replaced default namePrefix by @AlexanderSehr in #3428
• [Utilities] Updated token handling for readme examples by @AlexanderSehr in #3430
• [Modules] Data Factory: Added gitDisablePublish parameter by @krbar in #3437
• [Module] managedClusters - Add ingressProfile support for AKS by @samuelya in #3185
• [Modules] Firewall Policy - removed System-assigned identity by @krbar in #3441
• [Modules] Updated the NetworkManager module to the newest API by @krbar in #3442
• [Modules] Fixed EventHub role assignment naming issues by @krbar in #3443
• [Modules] Fixed globalConfiguration property logic for v1 appGw by @hip9k in #3421
• [CI Environment] Update the module table generation by @AlexanderSehr in #3407
• [Module] container-service | managed-clusters support for private clusters by @shawntmeyer in #3450
• [Modules] Enable 'Null' on DiagnosticLogCategoriesToEnable parameter to enable no logs to be collected. by @AlexanderSehr in #3456
• [Modules] Simplified DNS Forwarding Rule Input Parameter by @AlexanderSehr in #3413
• [Fixes] Regenerate main.json after diagnostic update by @eriqua in #3463
• [CI Environment] Fixed Pester test result output table by @AlexanderSehr in #3464
• [Fixes] Virtual Hubs readme regen by @eriqua in #3466
• [Modules] Moved metadata to template & removed dedicated file by @AlexanderSehr in #3426
• [Wiki] Updated 'sidebar' & 'home' to latest by @AlexanderSehr in #3482
• [Wiki] Update 'context' section to latest by @AlexanderSehr in #3501
• [CI environment] Get yml pipeline name based on specs resourcetype by @eriqua in #3507
• [Utilities] Updated Bicep to ARM conversion script by @AlexanderSehr in #3497
• [Modules] VPN gateways VPN connections fix folder name by @eriqua in #3510
• [Modules] RSV backup fabrics new inner folder to comply with resource type hierarchy by @eriqua in #3512
• [Wiki] Updated 'Getting Started' sections (& utilities) to latest by @AlexanderSehr in #3490
• [Wiki] Updated 'solution creation' to latest by @AlexanderSehr in #3495
• [Wiki] Updated 'Fetching changes' to latest version by @AlexanderSehr in #3486
• [Wiki] Updated 'known issues' to latest by @AlexanderSehr in #3493
• [Modules] Added Private Endpoint support to Cosmos DB by @AlexanderSehr in #3505
• [Wiki] Update 'Contribution Guide' to latest by @AlexanderSehr in #3484
• [Modules] Updated Synapse CMK interface by @AlexanderSehr in #3524
• [Wiki] Updated "CI Environment' to latest by @AlexanderSehr in #3499
• [Modules] Update SA/blobservice - deleteRetentionPolicy fix and addition by @MariusStorhaug in #3488
• [CI environment] Retrieve main resource type leveraging api specs by @eriqua in #3508
• [Wiki] Updated 'Module Library' section to latest by @AlexanderSehr in #3504
• [CI Environment] Fixed publishing issues when both main.bicep & main.json exist by @krbar in #3554
• [CI Environment] Improved robustness of registry publishing logic by @AlexanderSehr in #3411
• [Fixes] SQL server - Update minCapacity default value for elasticpools by @rahalan in #3555
• [Fixes] Update storage account main.json by @eriqua in #3557
• [Fixes] DB for postgreSQL regenerate readmes and json files by @eriqua in #3559
• [Fixes] ExpressRouteGateway - Update pipeline name to align with naming convention by @eriqua in #3562
• [Fixes] VM - Update cross reference to updated rsv module by @eriqua in #3558
• [Fixes] Update get core function by @eriqua in #3567
• [Modules] Azure Firewall - Added 'Basic' SKU support by @AlexanderSehr in #3569
• [Modules] hosts pools ScheduledAgentUpdates issue by @ThojoUno in #3582
• [Modules] Convert module names to singular (MAIN) by @eriqua in #3573
• [Fixes] Fix/express route ADO module pipeline path by @MariusStorhaug in #3595
• [Wiki] Fix 'av bicep version' typo by @MariusStorhaug in #3666
• [PSRule] Fix Rule Azure.Policy.AssignmentAssignedBy #2667 by @elanzel in #3719
• [Fixes] Fix Set-EnvironmentOnAgent param mapping by @MariusStorhaug in #3717
• [Modules] Allowed missing Front Door SKUs by @rajeshkaremane in #3713
• [Fixes] Fixed script resolving local referenecs by @AlexanderSehr in #3576
• [Modules] Updated API version of NetApp by @AlexanderSehr in #3836
• [Fixes] API issues & updated diagnostic settings by @AlexanderSehr in #3778
• [Fixes] Update deployment search to not prematurely throw an exception by @AlexanderSehr in #3871
• [Modules] New module for Microsoft.ResourceGraph/queries by @krbar in #3873
• [Modules] Bicep module to create Front Door WAF Policy (#3718) by @AlexanderSehr in #3881
• [CI Environment] Added context setting by @AlexanderSehr in #3882
• [PSRule] Fix Rule Azure.Policy.AssignmentDescriptors #2668 by @elanzel in #3893
• [PSRule] Fix Rule Azure.Policy.Descriptors by @elanzel in #3895
• [PSRule] Fix Rule Azure.Policy.ExemptionDescriptors by @elanzel in #3897
• [Fixes] Align GH removal with ADO by @MariusStorhaug in #3890
• [Modules] Update SQL Server test to support dynamic location parameter for Maintenance Configuration by @ahmadabdalla in #3899
• [CI Environment] Enabled the usage of both the old published module name, as well as the new PBR-aligned by @AlexanderSehr in #3892
• [Modules] Fixed diverse link references by @AlexanderSehr in #3905
• [Modules] Fix/Add purge during removal of machine learning workspace by @MariusStorhaug in #3597
• [Modules] Updated ACR common test case to support Paired region dependencies and updated to latest API version by @ahmadabdalla in #3900
• [Suggestion] - Some changes to PR template by @MariusStorhaug in #3667
• [Modules] ML - Wait on Private Endpoints before creating compute instances by @AlexanderSehr in #3908
• [Modules] Added new bicep features to tests by @AlexanderSehr in #3902
• [Modules] New child module ACR cache-rules by @AlexanderSehr in #3909
• [Utilities] Added 'required module' to Set-ModuleReadMe.ps1 script by @tyconsulting in #3915
• [Fixes] Update ADO pipeline conditions to make it impossible to continue on canceled job by @AlexanderSehr in #3583
• [CI Platform] Enabled module publishing from feature branch prerelease publishing without publishing stable version by @ahmadabdalla in #3906
• [Modules] New module for Microsoft.Search/searchServices by @krbar in #3883
• [Wiki] Updated Guidelines around publishing by @AlexanderSehr in #3924
• [Modules] Updated Data-Protection Vault API version by @AlexanderSehr in #3923
• [Modules] Update the AKS API Version to latest and added new features by @ahmadabdalla in #3920
• [Modules] Updated Databricks module to support more individual properties, PE & CMK by @AlexanderSehr in #3561
• [Bug] Updated Purview target location by @AlexanderSehr in #3925
• [Fixes] Express-route-gateway: Updated RBAC handling & added min test by @AlexanderSehr in #3927
• [Modules] Update private endpoint module reference to support location input and subnet location reference by @ahmadabdalla in #3929
• [Modules] Added 'Known Issue' for Lighthouse by @AlexanderSehr in #3930
• [Fixes] Fixed ConvertTo-ARMTemplate test case by @AlexanderSehr in #3931
• [Fixes] ManagementGroup: Fixed test template target scope by @AlexanderSehr in #3932
• [Fixes] Policy-Insights: Fixed possible scope for test cases by @AlexanderSehr in #3935
• [Fixes] Lock: Removed unused test parameter by @AlexanderSehr in #3934
• [Modules} Network Application-Gateway: Added private endpoint support by @lsnoddy in https://github.com//pull/3928
• [Fixes] NetworkWatcher: Removed unused input param for min test by @AlexanderSehr in #3933
• [Fixes] Tags: Removed unused param by @AlexanderSehr in #3936
• [Fixes] Fixed ConvertTo-ARMTemplate test case by @AlexanderSehr in #3937
• [Modules] Removed /.test/main.test.bicep files & test cases by @AlexanderSehr in #3940
• [Modules] Updated Redis RBAC nested module naming by @ahmadabdalla in #3942
• [Modules] Updated Managed Identity API Version and Added Federated Identity Credential by @ahmadabdalla in #3941
• [Modules] Updated Cosmos DB Module tests to support dynamic primary and secondary region locations by @ahmadabdalla in #3946