# Review ARM template revisions separately from resource API versions

> Does incrementing contentVersion change the API used to deploy an ARM resource?

- Canonical URL: https://update.dsesecurity.com/updates/dse-20260909-128-review-arm-template-revisions-separately-from-resource-api-versions/
- Publisher: Detection Systems & Engineering (DSE Security)
- Author: DSE Security Editorial Team
- Published: 2026-09-10T00:29:48+00:00
- Modified: 2026-09-10T00:52:38+00:00
- Last reviewed by DSE: 2026-09-09
- Resource type: Guide
- DSE priority: Information
- Topics: IT, Networks & Infrastructure
- Reading time: 2 minutes

## What you need to know

Does incrementing contentVersion change the API used to deploy an ARM resource?

## Potentially affected

Azure Resource Manager JSON templates with contentVersion and resource apiVersion fields.

## DSE recommendation

DSE recommends describing the purpose of each version-field change in the review.

## Article

## Source facts

ARM’s contentVersion records the template’s version and can document significant template changes. A resource’s apiVersion selects the REST API used to create that resource. Microsoft recommends retaining a working resource API version and considering an update when a later version provides a needed feature. These are different versioning decisions. [Microsoft Learn](https://learn.microsoft.com/en-us/azure/azure-resource-manager/templates/syntax).

## Applicability

Apply this distinction during template maintenance and release review. Identify whether a proposed edit labels a new template revision or changes the resource API contract. Keep the template language version and resource API choice visible as separate fields rather than treating every version string as interchangeable.

## DSE recommendation

DSE recommends describing the purpose of each version-field change in the review. For a template revision, retain the actual content diff with its revision label. For a resource API update, inspect the intended feature and relevant resource schema, then plan a controlled deployment check. Avoid combining an unexplained API change with an otherwise administrative release-number update.

## Verification

Compare the previous and proposed templates field by field. Verify which resources, if any, have a changed apiVersion and assess those changes against their intended configuration. Use approved validation and test deployment evidence for the affected resources before production release. Preserve both the template revision and the specific resource API versions in the acceptance record; a higher template version alone should not be described as an API upgrade.

## Official references

[Microsoft Learn](https://learn.microsoft.com/en-us/azure/azure-resource-manager/templates/syntax). Source retrieved September 9, 2026.

## Primary reference

- Name: Template structure and syntax - Azure Resource Manager | Microsoft Learn
- Authority: Microsoft Learn
- URL: https://learn.microsoft.com/en-us/azure/azure-resource-manager/templates/syntax
- Source publication date: Not stated by the source

## Citation and use

Preferred citation: “Review ARM template revisions separately from resource API versions,” DSE Security, https://update.dsesecurity.com/updates/dse-20260909-128-review-arm-template-revisions-separately-from-resource-api-versions/
Publishing principles: https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/
Usage and citation policy: https://update.dsesecurity.com/usage/
Copyright © 2026 Detection Systems & Engineering. All rights reserved.