Azure/azure-policy issues and pull requests

#1273 - Enabling AKS Azure Policy Addon when workload identity is enabled. Pods start showing error "Multiple user assigned identities exist, please specify the clientId / resourceId of the identity in the token request"

Issue - State: open - Opened by atedsimple 5 months ago

#1272 - Built-in Policy Release 3acc1063

Pull Request - State: closed - Opened by gokmen-msft 6 months ago

#1271 - CMMC 2.0 Level 2 (4e50fd13-098b-3206-61d6-d1d78205cb45) PolicySet - incorrect additionalMetadataId value

Issue - State: open - Opened by JulianHayward 6 months ago

#1271 - CMMC 2.0 Level 2 (4e50fd13-098b-3206-61d6-d1d78205cb45) PolicySet - incorrect additionalMetadataId value

Issue - State: open - Opened by JulianHayward 6 months ago

#1270 - Creating a complex policy to cross-reference two array fields

Issue - State: open - Opened by mbrijun 6 months ago

#1269 - There was an error processing your request. Try again in a few moments.

Issue - State: open - Opened by petercharleston 6 months ago

#1268 - ExcludeUsageCosts_Deny: Misspelling on Policy Description

Issue - State: open - Opened by fabianra21 6 months ago

#1267 - Update README.md

Pull Request - State: closed - Opened by mentat9 6 months ago

#1266 - Update known issues to include serverGroups

Pull Request - State: closed - Opened by kenieva 6 months ago

#1265 - Require a tag on resource groups: modify policyRule to exclude resourcegroup name auto-created from azure portal to avoid errors on deployment

Issue - State: open - Opened by paoIpao 6 months ago - 2 comments

#1264 - Built-In DeployIfNotExists policies for diagnostic settings on Table and Queue Storage is reporting faulty non-compliance

Issue - State: open - Opened by theautomationdude 6 months ago

#1263 - Azure Cognitive Search services should use customer-managed keys to encrypt data at rest: Does not function with Deny Effect

Issue - State: open - Opened by cmurrayjr 6 months ago

#1262 - Built-in Policy Release 79649856

Pull Request - State: closed - Opened by gokmen-msft 6 months ago

#1261 - Built-in Policy Release edcb38fa

Pull Request - State: closed - Opened by gokmen-msft 6 months ago

#1260 - Kubernetes cluster pods should only use approved host network and port range

Issue - State: open - Opened by roshithrajan 7 months ago

#1259 - Built-in policy "Configure Windows virtual machines to run Azure Monitor Agent with user-assigned managed identity-based authentication" does not accept values for "bringYourOwnUserAssignedManagedIdentity"

Issue - State: open - Opened by loewel 7 months ago

#1258 - Azure Update Manager policies do not support Red Hat 9

Issue - State: open - Opened by neok-g 7 months ago - 1 comment

#1257 - AzureSecurityCenter.json - Missing effects from list of allowedValues in assignment parameters for multiple definitions

Issue - State: open - Opened by Dekor86 7 months ago

#1256 - Update AzureKeyVaultFirewallEnabled_Audit.json

Pull Request - State: closed - Opened by Musyoka534 7 months ago

#1255 - Update AzureKeyVaultFirewallEnabled_Audit.json

Pull Request - State: closed - Opened by Musyoka534 7 months ago

#1254 - Update repo owners

Pull Request - State: closed - Opened by robga 7 months ago

#1253 - Built-in Policy Release 3cfda2a2

Pull Request - State: closed - Opened by gokmen-msft 7 months ago

#1252 - Update AzureSecurityCenter.json - Missing effects from list of allowedValues in assignment parameters

Pull Request - State: closed - Opened by Dekor86 7 months ago - 4 comments

#1251 - Built-in Policy Release cbf95f4c

Pull Request - State: closed - Opened by pilor 7 months ago

#1250 - Built-in Policy Release cb9cc67d

Pull Request - State: closed - Opened by pilor 7 months ago

#1249 - Allow `csi` volumes in the Kubernetes restricted initiative

Issue - State: open - Opened by aelij 7 months ago - 1 comment

#1248 - Built-in policy "Configure Cognitive Services accounts to use private DNS zones" registers Azure OpenAI resources in the wrong zone

Issue - State: open - Opened by juanandmsft 7 months ago - 1 comment

#1247 - Update repo owners

Pull Request - State: closed - Opened by robga 7 months ago

#1246 - Video Analyzer accounts should use customer-managed keys to encrypt data at rest: property doesn't exist

Issue - State: open - Opened by jdgoeij 7 months ago - 1 comment

#1245 - Built-in policy "[Preview]: Configure Recovery Services vaults to use private DNS zones for backup" does not consider backup vault location

Issue - State: open - Opened by juanandmsft 7 months ago

#1244 - Built-in policy "Deploy - Configure IoT Central to use private DNS zones" only implements one of four required zones

Issue - State: open - Opened by juanandmsft 7 months ago

#1243 - Built-in Policy Release f9ebef38

Pull Request - State: closed - Opened by pilor 7 months ago

#1242 - Built-in Policy Release f98b9bcc

Pull Request - State: closed - Opened by pilor 8 months ago

#1241 - SWIFT CSP–CSCF v2024

Issue - State: open - Opened by mohdhaslan 8 months ago

#1240 - Bug: Incorrect assessment name in policy for SQL server vulnerability assessment

Issue - State: open - Opened by tyconsulting 8 months ago

#1239 - Update AKS_DisableRunCommand_Deploy.json

Pull Request - State: open - Opened by denniszielke 8 months ago - 5 comments

#1238 - Built-in Policy Release da9c6b7a

Pull Request - State: closed - Opened by pilor 8 months ago

#1237 - Azure policy to deny creation of second diagnostic setting if the first one already exists.

Issue - State: open - Opened by gmounica39 8 months ago

#1236 - Azure Service Bus auto scale event is blocked by Built-In policy "Azure Service Bus namespaces should have local authentication methods disabled"

Issue - State: open - Opened by specialenroute 8 months ago

#1235 - Built-in Policy Release ec549245

Pull Request - State: closed - Opened by pilor 8 months ago

#1234 - Start-AzPolicyRemediation: InvalidUpdateRemediationRequest

Issue - State: open - Opened by hoppipola004 8 months ago - 1 comment

#1233 - Built-in Policy Release 2ee49b41

Pull Request - State: closed - Opened by pilor 8 months ago

#1232 - Policy: Require Encryption on Data Lake Store - needs Audit

Issue - State: open - Opened by BevanSin 8 months ago

#1231 - Azure SQL Database should be running TLS version 1.2 or newer: not working as expected

Issue - State: open - Opened by chris-dnv 8 months ago - 1 comment

#1230 - Alias Request: Microsoft.RecoveryServices/vaults/resourceGuardProxies[*]/resourceGuardResourceId

Issue - State: open - Opened by mbrat2005 8 months ago

#1229 - Built-in Policy Release 70ec4c64

Pull Request - State: closed - Opened by pilor 9 months ago

#1228 - Create Namespaces_PublicNetworkAccess_AuditDeny.json

Pull Request - State: closed - Opened by george-guirguis 9 months ago - 1 comment

#1227 - "Managed disks should disable public network access" Should Allow Disabling All Network Access

Issue - State: open - Opened by gamullen 9 months ago

#1226 - MySQL and PostgreSQL support AAD rebranding in azure policy pages.

Pull Request - State: closed - Opened by linyudoa 9 months ago

#1225 - add publicNetworkAccess forMySQL Flexible server

Pull Request - State: closed - Opened by xiaoxuqi-ms 9 months ago

#1224 - Kubernetes Examples Release ff326952

Pull Request - State: closed - Opened by pilor 9 months ago

#1223 - Request: DINE policy for private endpoint -> private DNS zone linking with static webapps

Issue - State: open - Opened by rybal06 9 months ago - 6 comments

#1222 - Bump @babel/traverse from 7.15.4 to 7.23.2

Pull Request - State: closed - Opened by dependabot[bot] 9 months ago
Labels: dependencies

#1221 - Built-in Policy Release ff326952

Pull Request - State: closed - Opened by pilor 9 months ago

#1220 - MDC_DfSQL_DeployDefaultWorkspace: deployWorkspace property has too long prefix

Issue - State: open - Opened by p0llynomial 9 months ago

#1219 - AzureMonitor_DCRA_VM_Linux_Deploy: Potential bug with DCEs

Issue - State: closed - Opened by vijaytdh 9 months ago - 2 comments

#1218 - Built-in Policy Release bf3a8ec5

Pull Request - State: closed - Opened by pilor 9 months ago

#1217 - Built-in Policy Release f1b96242

Pull Request - State: closed - Opened by pilor 9 months ago

#1216 - Deploy Dependency agent to be enabled on Windows virtual machines with Azure Monitoring Agent settings: Update list of supported Windows OSes for Dependency agent

Issue - State: open - Opened by kamfaima 9 months ago

#1215 - Built-in Policy Release a8ed6eeb

Pull Request - State: closed - Opened by pilor 9 months ago

#1214 - Enforce Tag on Resource Groups

Issue - State: open - Opened by clifpi 10 months ago

#1213 - Built-in Policy Release 2d6b82a4

Pull Request - State: closed - Opened by pilor 10 months ago

#1212 - Changes to apply Threat Protection Policy to NoSQL API Only

Pull Request - State: closed - Opened by AbhinavTrips 10 months ago - 1 comment

#1211 - Deploy SQL DB transparent data encryption includes Synapse workspace databases in managed RGs

Issue - State: open - Opened by GitHubUser1339 10 months ago - 1 comment

#1210 - Built-in Policy Release 58e70da4

Pull Request - State: closed - Opened by pilor 10 months ago

#1209 - [Preview]: Schedule recurring updates using Update Management Center

Issue - State: open - Opened by sajwvanzundert 10 months ago

#1208 - Suggestion: KubernetesService/container-resource-limits

Issue - State: open - Opened by m8yng 10 months ago

#1207 - Built-in Policy Release f9026ff6

Pull Request - State: closed - Opened by pilor 10 months ago

#1206 - Built-in Policy Release cb2aa5af

Pull Request - State: closed - Opened by pilor 10 months ago

#1205 - How to properly assign this policy to both Windows & Linux

Issue - State: open - Opened by runemy 11 months ago

#1204 - Built-in Policy Release 60b6963d

Pull Request - State: closed - Opened by pilor 11 months ago

#1203 - Configure Linux virtual machine to run Azure Monitor Agent using system-assigned managed identity: fails with typeHandlerVersion invalid

Issue - State: open - Opened by ofbjansen 11 months ago - 2 comments

#1202 - Fix a typo, change specifc to specific

Pull Request - State: closed - Opened by Expecho 11 months ago - 1 comment

#1201 - MachineLearningServices_ComputeInstanceUpdates_Audit

Issue - State: open - Opened by schumixmd 11 months ago - 1 comment

#1200 - Can we have lessthan,greater than, lessthan or equalto, greater than equalto operators available in azure policies.

Issue - State: open - Opened by githubofkrishnadhas 11 months ago

#1199 - Adding MicrosoftSQLServer-WS2022 Image offer missing from detection to Azure Backup and Security Center related policies

Pull Request - State: closed - Opened by haflidif 11 months ago - 2 comments

#1198 - VirtualMachineWithTag_Backup_Deploy: Doesn't detect MicrosoftSQLServer on WS2022

Issue - State: open - Opened by haflidif 11 months ago

#1197 - VirtualMachineBackup_Backup_DeployIfNotExists: Doesn't detect MicrosoftSQLServer on WS2022

Issue - State: open - Opened by haflidif 11 months ago

#1196 - Built-in Policy Release f3bb6afa

Pull Request - State: closed - Opened by pilor 11 months ago

#1195 - HIPAA_HITRUST_audit : Diag settings for KeyVaults

Issue - State: open - Opened by AZMadeEZ 11 months ago - 1 comment

#1194 - App Service apps should disable public network access: Does not work with private endpoints

Issue - State: open - Opened by audunsolemdal 11 months ago

#1193 - HIPAA_HITRUST_audit : DeployDiagnosticSettingsforNetworkSecurityGroups

Issue - State: open - Opened by AZMadeEZ 11 months ago

#1192 - HIPAA_HITRUST_audit : networkSecurityGroupsOnSubnetsMonitoring

Issue - State: open - Opened by AZMadeEZ 11 months ago

#1191 - Built-in Policy Release f2126eef

Pull Request - State: closed - Opened by pilor 11 months ago

#1190 - Kubernetes Examples Release 49d507e3

Pull Request - State: closed - Opened by pilor 11 months ago

#1189 - Azure Kubernetes Clusters should enable Key Management Service (KMS): evaluates incorrectly for clusters with system-assigned managed identity

Issue - State: open - Opened by v1adev 12 months ago

#1188 - Update Known Issues

Pull Request - State: closed - Opened by mentat9 12 months ago

#1187 - Make aliases modifiable Microsoft.DocumentDB/databaseAccounts/disableKeyBasedMetadataWriteAccess

Issue - State: open - Opened by BartDecker 12 months ago

#1186 - Built-in Policy Release 49d507e3

Pull Request - State: closed - Opened by pilor 12 months ago

#1185 - Azure Kubernetes Service Private Clusters should be enabled: When enforcment mode is Deny, blocks deployment of Azure Monitor even if cluster is private

Issue - State: open - Opened by eehret 12 months ago

#1184 - Updated the known issues in two places.

Pull Request - State: closed - Opened by sehoff16 12 months ago - 3 comments

#1183 - Bump word-wrap from 1.2.3 to 1.2.4

Pull Request - State: closed - Opened by dependabot[bot] 12 months ago
Labels: dependencies

#1182 - Update README.md

Pull Request - State: closed - Opened by robga 12 months ago

#1181 - Built-in Policy Release dd153f5c

Pull Request - State: closed - Opened by pilor 12 months ago

#1180 - Add effect to DiagnosticSettingsForTypes policy

Pull Request - State: closed - Opened by BoSoeborgPetersen 12 months ago - 1 comment

#1179 - Add effect to policies

Issue - State: open - Opened by BoSoeborgPetersen 12 months ago - 1 comment

#1178 - Add Deny effect to GeoRedundant_StorageAccounts policy

Pull Request - State: closed - Opened by BoSoeborgPetersen 12 months ago - 1 comment

#1177 - Add effect to ResourceGroupRequireTagAndValue policy

Pull Request - State: closed - Opened by BoSoeborgPetersen 12 months ago - 1 comment

#1176 - Add effect to ResourceGroupRequireTag policy

Pull Request - State: closed - Opened by BoSoeborgPetersen 12 months ago - 1 comment

#1175 - Add effect to RequireTagAndValue policy

Pull Request - State: closed - Opened by BoSoeborgPetersen 12 months ago - 1 comment

GitHub / Azure/azure-policy issues and pull requests