Add new optional parameter CVMOsDiskEncryptionSetId in Restore-AzRecoveryServicesBackupItem

[SourabhSomnathGholap]

Description

In this PR I have added new optional parameter CVMOsDiskEncryptionSetId in Restore-AzRecoveryServicesBackupItem. This parameter will take disk encryption set id as input and it will be used for encryption of restored secured VM OS disk.

Mandatory Checklist

• Please choose the target release of Azure PowerShell. (⚠️Target release is a different concept from API readiness. Please click below links for details.)

  • General release
  • Public preview
  • Private preview
  • Engineering build
  • No need for a release

• Check this box to confirm: I have read the Submitting Changes section of CONTRIBUTING.md and reviewed the following information:

• SHOULD update ChangeLog.md file(s) appropriately
  • Update src/{{SERVICE}}/{{SERVICE}}/ChangeLog.md.
    • A snippet outlining the change(s) made in the PR should be written under the ## Upcoming Release header in the past tense.
  • Should not change ChangeLog.md if no new release is required, such as fixing test case only.
• SHOULD regenerate markdown help files if there is cmdlet API change. Instruction
• SHOULD have proper test coverage for changes in pull request.
• SHOULD NOT adjust version of module manually in pull request

[azure-client-tools-bot-prd]

Thanks for your contribution! The pull request validation has started. Please revisit this comment for updated status.

[github-actions]

‼️ DO NOT MERGE THIS PR ‼️
This PR was labeled "Do Not Merge" because it contains code change that cannot be merged. Please contact the reviewer for more information.

[Copilot]

Pull Request Overview

This PR adds a new optional parameter CVMOsDiskEncryptionSetId to the Restore-AzRecoveryServicesBackupItem cmdlet for encrypting the OS disk of restored Confidential VMs (secured VMs with managed disks).

• Adds the CVMOsDiskEncryptionSetId parameter to support disk encryption set specification during VM restore operations
• Updates help documentation and parameter descriptions for the new encryption functionality
• Includes comprehensive test coverage for the new parameter with multiple scenarios

Reviewed Changes

Copilot reviewed 8 out of 9 changed files in this pull request and generated 2 comments.

Show a summary per file

File	Description
RestoreAzureRMRecoveryServicesBackupItem.cs	Adds the new CVMOsDiskEncryptionSetId parameter and integrates it into restore logic
IaasVmPsBackupProvider.cs	Implements backend logic to handle the encryption set ID in restore requests
ParamHelpMsgs.cs	Adds help message constant for the new parameter
CmdletParamEnums.cs	Adds the new parameter to the RestoreVMBackupItemParams enum
Restore-AzRecoveryServicesBackupItem.md	Updates cmdlet documentation with new parameter details
ChangeLog.md	Documents the new feature addition
ItemTests.ps1	Adds comprehensive test function for the new parameter
ItemTests.cs	Registers the new test in the test framework

Comments suppressed due to low confidence (3)

src/RecoveryServices/RecoveryServices/ChangeLog.md:21

• The parameter name in the changelog should match the actual parameter name. The changelog uses 'CVMOsDiskEncryptionSetId' but the PR title and description refer to 'SecuredVMOsDiskEncryptionSetId'. Based on the code changes, the correct name is 'CVMOsDiskEncryptionSetId'.

* Added new optional parameter CVMOsDiskEncryptionSetId in Restore-AzRecoveryServicesBackupItem.

src/RecoveryServices/RecoveryServices.Backup.Test/ScenarioTests/IaasVm/ItemTests.ps1:1360

• The parameter name used in the test is 'CVMOSDiskEncryptionSetId' but should be 'CVMOsDiskEncryptionSetId' to match the actual parameter name defined in the cmdlet.

		$restoreJob = Restore-AzRecoveryServicesBackupItem -VaultId $vault.ID -VaultLocation $vault.Location `

src/RecoveryServices/RecoveryServices.Backup.Test/ScenarioTests/IaasVm/ItemTests.ps1:1372

• The parameter name used in the test is 'CVMOSDiskEncryptionSetId' but should be 'CVMOsDiskEncryptionSetId' to match the actual parameter name defined in the cmdlet.

		$restoreJob = Restore-AzRecoveryServicesBackupItem -VaultId $vault.ID -VaultLocation $vault.Location `

[YanaXu]

/azp run azure-powershell - security-tools

[azure-pipelines]

Azure Pipelines successfully started running 1 pipeline(s).

[YanaXu]

/azp run azure-powershell - security-tools

[azure-pipelines]

Azure Pipelines successfully started running 1 pipeline(s).

[YanaXu]

Hi @SourabhSomnathGholap, since you label this PR as "Do Not Merge", I'll leave it as unmerged. Please remove the "Do Not Merge" label when it's ready. I'll merge it then. Thanks.
Please notice the next code complete date is 07/29/2025.

[github-actions]

‼️ DO NOT MERGE THIS PR ‼️
This PR was labeled "Do Not Merge" because it contains code change that cannot be merged. Please contact the reviewer for more information.