diff --git a/documentation/breaking-changes/upcoming-breaking-changes.md b/documentation/breaking-changes/upcoming-breaking-changes.md
index 6413ad5f8bbf..4c8871ce3f40 100644
--- a/documentation/breaking-changes/upcoming-breaking-changes.md
+++ b/documentation/breaking-changes/upcoming-breaking-changes.md
@@ -310,6 +310,42 @@ Preview modules are not included in this list. Read more about [module version t
   - This change will take effect on '5/1/2026'- The change is expected to take effect from Az version : '16.0.0'
   - The change is expected to take effect from version : '2.0.0'
 
+## Az.DnsResolver
+
+### `New-AzDnsResolverPolicyDnsSecurityRule`
+
+- Cmdlet breaking-change will happen to all parameter sets
+  - The parameter 'ActionBlockResponseCode' is being removed.
+  - Change description: The block response code is no longer configurable in API version 2025-10-01-preview.
+  - This change will take effect on '05/01/2026'
+  - The change is expected to take effect from Az version : '16.0.0'
+  - The change is expected to take effect from version : '2.0.0'
+
+- Cmdlet breaking-change will happen to all parameter sets
+  - The parameter 'DnsResolverDomainList' will no longer be mandatory.
+  - Change description: DNS security rules now support 'ManagedDomainList' as an alternative to user-defined domain lists.
+  - This change will take effect on '05/01/2026'
+  - The change is expected to take effect from Az version : '16.0.0'
+  - The change is expected to take effect from version : '2.0.0'
+
+### `Update-AzDnsResolverPolicyDnsSecurityRule`
+
+- Cmdlet breaking-change will happen to all parameter sets
+  - The parameter 'ActionBlockResponseCode' is being removed.
+  - Change description: The block response code is no longer configurable in API version 2025-10-01-preview.
+  - This change will take effect on '05/01/2026'
+  - The change is expected to take effect from Az version : '16.0.0'
+  - The change is expected to take effect from version : '2.0.0'
+
+### `New-AzDnsResolverDomainList`
+
+- Cmdlet breaking-change will happen to all parameter sets
+  - The parameter 'Domain' will no longer be mandatory.
+  - Change description: Domain lists now support bulk upload via 'Invoke-AzDnsResolverBulkDnsResolverDomainList' as an alternative to inline domain specification.
+  - This change will take effect on '05/01/2026'
+  - The change is expected to take effect from Az version : '16.0.0'
+  - The change is expected to take effect from version : '2.0.0'
+
 ## Az.KeyVault
 
 ### `Get-AzKeyVaultKey`
diff --git a/src/DnsResolver/DnsResolver.Autorest/README.md b/src/DnsResolver/DnsResolver.Autorest/README.md
index 2f35d1f85eed..baa3b6ac945a 100644
--- a/src/DnsResolver/DnsResolver.Autorest/README.md
+++ b/src/DnsResolver/DnsResolver.Autorest/README.md
@@ -129,4 +129,34 @@ directive:
     set:
       preview-announcement:
         preview-message: "*****************************************************************************************\\r\\n* This cmdlet will undergo a breaking change in Az v16.0.0, to be released in May 2026. *\\r\\n* At least one change applies to this cmdlet.                                                     *\\r\\n* See all possible breaking changes at https://go.microsoft.com/fwlink/?linkid=2333486            *\\r\\n**************************************************************************************************"
+  - where:
+      verb: New|Update
+      subject: PolicyDnsSecurityRule
+    set:
+      breaking-change:
+        deprecated-cmdlet-output-type: ''
+        change-description: The parameter 'ActionBlockResponseCode' has been removed. The block response code is no longer configurable in API version 2025-10-01-preview.
+        deprecated-by-version: 2.0.0
+        deprecated-by-azversion: 16.0.0
+        change-effective-date: 2026/05/01
+  - where:
+      verb: New
+      subject: PolicyDnsSecurityRule
+    set:
+      breaking-change:
+        deprecated-cmdlet-output-type: ''
+        change-description: The parameter 'DnsResolverDomainList' is no longer mandatory. DNS security rules now support 'ManagedDomainList' as an alternative to user-defined domain lists.
+        deprecated-by-version: 2.0.0
+        deprecated-by-azversion: 16.0.0
+        change-effective-date: 2026/05/01
+  - where:
+      verb: New
+      subject: DnsResolverDomainList
+    set:
+      breaking-change:
+        deprecated-cmdlet-output-type: ''
+        change-description: The parameter 'Domain' is no longer mandatory. Domain lists now support bulk upload via 'Invoke-AzDnsResolverBulkDnsResolverDomainList' as an alternative to inline domain specification.
+        deprecated-by-version: 2.0.0
+        deprecated-by-azversion: 16.0.0
+        change-effective-date: 2026/05/01
 ```
diff --git a/src/DnsResolver/DnsResolver/ChangeLog.md b/src/DnsResolver/DnsResolver/ChangeLog.md
index f16ca63608b8..0244c55aa491 100644
--- a/src/DnsResolver/DnsResolver/ChangeLog.md
+++ b/src/DnsResolver/DnsResolver/ChangeLog.md
@@ -18,6 +18,9 @@
         - Additional information about change #1
 -->
 ## Upcoming Release
+* [Breaking Change] Removed parameter `ActionBlockResponseCode` from `New-AzDnsResolverPolicyDnsSecurityRule` and `Update-AzDnsResolverPolicyDnsSecurityRule`. The block response code is no longer configurable.
+* [Breaking Change] Parameter `DnsResolverDomainList` is no longer mandatory on `New-AzDnsResolverPolicyDnsSecurityRule`. DNS security rules now support `ManagedDomainList` as an alternative.
+* [Breaking Change] Parameter `Domain` is no longer mandatory on `New-AzDnsResolverDomainList`. Domain lists now support bulk upload via `Invoke-AzDnsResolverBulkDnsResolverDomainList`.
 
 ## Version 1.2.1
 * Preannounced breaking changes. Please refer to https://go.microsoft.com/fwlink/?linkid=2333229