Skip to content

3.7.3

Release Date: June 8, 2026

✨ New Features

Project Templates

Self-Service DLQ Access Configuration 📬

Template: saif-feature-event-subscription

Commit: d6845ebd · Closes #696 · #765

Teams can now grant Entra ID users and groups access to browse and manage dead-letter queue (DLQ) messages via YAML config — no portal steps or platform team intervention required. This follows the same self-service pattern used by saif-feature-database-cosmosdb for CosmosDB data readers.

Key Features:

  • ✅ DLQ Readers — Grant Azure Service Bus Data Receiver role via dlq_readers config block
  • ✅ DLQ Managers — Grant Azure Service Bus Data Owner role via dlq_managers config block
  • ✅ Per-Environment Control — Omit an environment key to restrict access (e.g. exclude prod for reader-only non-prod access)

Example:

# feature-event-subscription-dlq-vars.yaml
dlq_readers:
  dev:
    - object_id: 00000000-0000-0000-0000-000000000001
      display_name: "My Dev Team"
  test:
    - object_id: 00000000-0000-0000-0000-000000000001
      display_name: "My Dev Team"

dlq_managers:
  dev:
    - object_id: 00000000-0000-0000-0000-000000000002
      display_name: "Platform Team"
  test:
    - object_id: 00000000-0000-0000-0000-000000000002
      display_name: "Platform Team"
  prod:
    - object_id: 00000000-0000-0000-0000-000000000002
      display_name: "Platform Team"

Documentation:

🐛 Bug Fixes

Terraform Modules

Drop Broken OTEL Moved Block Chain 🔧

Module: identity

Commit: e050c98d · #774

Removes all OTEL-related moved blocks that were left in an invalid state after the _uami resource rename in #770. Terraform validates all moved block targets against the current configuration and would error when a target address no longer exists. Dropping the chain is safe because RBAC role assignments are idempotent — Terraform will destroy and recreate them cleanly.

Affected files:

  • src/terraform/saif-resources/modules/identity/moved.tf — deleted (contained only broken OTEL blocks)
  • src/terraform/saif-web-service/moved.tf — OTEL blocks removed
  • src/terraform/saif-event-subscriber-service/moved.tf — OTEL blocks removed
  • src/terraform/saif-api-service/moved.tf — OTEL blocks removed
  • src/smithy/infra/bot/moved.tf — OTEL blocks removed

🔄 Breaking Changes

None in this release ✅

📋 Additional Notes

  • Total commits: 2
  • Files changed: 14
  • Contributors: Emmitt Johnson, Jason Coria Corona Yue

Support

  • 📧 Teams Support Channel: Support