When defining or calling APIs (including Azure Sentinel/Microsoft Security connector artifacts), always use a stable, supported apiVersion and keep it consistent across all related files. Avoid “preview”/older apiVersion values unless there is an explicit, documented need.
How to apply:
apiVersion fields in every related artifact (e.g., connector definition, polling config, DCR, and table resources) rather than only one file.apiVersion to a stable version that supports it, orExample (before/after):
// Before (preview/older)
{
"apiVersion": "2022-09-01-preview",
"type": "Microsoft.SecurityInsights/dataConnectorDefinitions"
}
// After (stable)
{
"apiVersion": "2023-09-01",
"type": "Microsoft.SecurityInsights/dataConnectorDefinitions"
}
Team standard:
apiVersion for each resource type.apiVersion values without an approved exception.