azure-powershell icon indicating copy to clipboard operation
azure-powershell copied to clipboard

[Feature]: PS: Throw Warning when user tries to deploy VM/VMSS using a deprecating image

Open NingKuang opened this issue 2 months ago • 3 comments

Description of the new feature

Related command az vm create az vmss create

Is your feature request related to a problem? Please describe. General: Azure marketplace allows user to publish images, however many images are not deleted after deprecated. These deprecated images incurs additional capacity cost to Azure, and causes security/compliance risks for user to still use them. Today the image deletions cannot start until the usage reaches a certain threshold. We need to accelerate the deletion of the deprecated images by keep user away from using these deprecated images. Urgent: Due to .net 6 deprecation, Windows server team is deprecating all WS 2022 images from marketplace, we need to make sure this deprecation is executed in a timely manner, so both 1P and 3P services can move away from the deprecated WS 2022 images which contains EOL software with security risks.

Describe the solution you'd like When " az vm/vmss create" is executed, if the image user selects is already marked as "scheduledfordeprecation", we need to throw a warning, asking user not to use the deprecating images due to security and compliance risk.

Describe alternatives you've considered Today, during the image deprecation, we send email to user to notify the deprecation, however this is not effective, user often ignore the notifications. There is also a "soft delete" process to block user from creating new VM, however that may cause outage if user ignored the previous notification. We need a way to effectively notify/warn user before the actual function breaks starts.

Additional context For .NET 6 deprecation and Windows server 2022 image deprecation, see https://techcommunity.microsoft.com/blog/azurecompute/breaking-change-for-window-server-2022-image-users/4262423 Since this is a large scale image deprecation (impacting all WS 2022 marketplace image users), we are asking this feature to be implemented ASAP, ideally released by Jan 2026.

Related feature: Feature 34692513 [Br]: Remove deprecating image from the recent used OS image list in VM/VMSS creating portal UI

How to check for ImageDeprecationStatus: ImageState is Deprecated (Virtual Machine Images - Get - REST API (Azure Compute) | Microsoft Learn)

Note I have created a same request to CLI: Throw Warning when user tries to deploy VM/VMSS using a deprecating image · Issue #32314 · Azure/azure-cli

Proposed implementation details (optional)

No response

NingKuang avatar Oct 30 '25 02:10 NingKuang

This issue is related to security. Please pay attention.

Powered by issue-sentinel

github-actions[bot] avatar Oct 30 '25 02:10 github-actions[bot]

Thanks for the feedback! We are routing this to the appropriate team for follow-up. cc @Drewm3, @TravisCragg-MSFT, @nikhilpatel909, @sandeepraichura, @hilaryw29, @GabstaMSFT.

Thanks for the feedback! We are routing this to the appropriate team for follow-up. cc @Drewm3, @TravisCragg-MSFT, @nikhilpatel909, @sandeepraichura, @hilaryw29, @GabstaMSFT.