Add Azure CLI support for First Party Service Tags

[karthikka4820]

Preconditions

• No need to upgrade Python SDK or the Python SDK is ready.

Related command

az network first-party-service-tag create
az network first-party-service-tag update
az network first-party-service-tag show
az network first-party-service-tag list
az network first-party-service-tag delete
az network first-party-service-tag wait

az network public-ip create
az network public-ip update
az network public-ip prefix create
az network public-ip prefix update

az vm create
az vm update
az vmss create
az vmss update

Resource Provider

Microsoft.Network/firstPartyServiceTags

Description of Feature or Work Requested

Add Azure CLI support for managing First Party Service Tag resources and associating them with supported public IP configurations.

The requested work includes:

1. Add commands to create, update, retrieve, list, delete, and wait on  Microsoft.Network/firstPartyServiceTags  resources.
2. Support referencing a First Party Service Tag from Public IP Address and Public IP Prefix IP-tag configurations.
3. Support the  firstPartyServiceTagId  property in VM and VMSS implicit public IP configurations.
4. Support asynchronous create, update, and delete operations through  --no-wait  and a corresponding  wait  command where applicable.

The command group should preferably be generated using AAZ and initially marked Preview.

Minimum API Version Required

2025-09-01

Swagger PR link / SDK link

Network First Party Service Tag resource and Public IP/Public IP Prefix integration:

• Azure/azure-rest-api-specs#44870
• Azure/azure-rest-api-specs#45082

Compute VM and VMSS integration:

• Azure/azure-rest-api-specs#43752

Request Example

• Create a First Party Service Tag

• Get a First Party Service Tag

• List First Party Service Tags in a resource group

• List all First Party Service Tags

• Update First Party Service Tag tags

• Delete a First Party Service Tag

• Create a Public IP Address with a First Party Service Tag

• Create a Public IP Prefix with a First Party Service Tag

There is a known Swagger schema discrepancy for  resourceGuid. The 2025-09-01 service response returns  resourceGuid  at the root of the First Party Service Tag resource, while the published specification currently defines it under properties.

The PowerShell implementation applies an AutoRest transform that moves  resourceGuid  from  FirstPartyServiceTagPropertiesFormat  to the root  FirstPartyServiceTag  model. The CLI implementation may require an equivalent AAZ customization.

Target Date

2026-09-01

PM Contact

Mario Lopez (@malopMSFT)

Engineer Contact

karthikka

Additional context

Corresponding Azure PowerShell PRs:

• First Party Service Tag management and Public IP integration: Azure/azure-powershell#29970
• Follow-up fixes: Azure/azure-powershell#30041
• VM and VMSS integration: Azure/azure-powershell#30069

There is a known Swagger schema discrepancy for  resourceGuid . The  2025-09-01  service response returns  resourceGuid  at the root of the First Party Service Tag resource, while the published specification currently defines it under  properties .

The PowerShell implementation applies an AutoRest transform that moves  resourceGuid  from  FirstPartyServiceTagPropertiesFormat  to the root  FirstPartyServiceTag  model. The CLI implementation may require an equivalent AAZ customization. Swagger specification will be fixed in next release.

The Network resource operations require API version  2025-09-01 . The separate VM/VMSS  firstPartyServiceTagId  integration is defined in the Compute API version  2026-04-01.

[yonzhan]

Thank you for opening this issue, we will look into it.