Azure/azure-policy issues and pull requests

#1314 - Built-in Policy Release b83fbcd1

Pull Request - State: closed - Opened by gokmen-msft 5 months ago

#1313 - Added details in Known Issues for skipped evaluations for managed RGs (Microsoft.Databricks/workspaces & Microsoft.Solutions/applications), updated some formatting in README

Pull Request - State: closed - Opened by shanhix1 5 months ago

#1313 - Added details in Known Issues for skipped evaluations for managed RGs (Microsoft.Databricks/workspaces & Microsoft.Solutions/applications), updated some formatting in README

Pull Request - State: closed - Opened by shanhix1 5 months ago

#1312 - Email notification for high severity alerts should be enabled: Validates that email notifications are off rather than on

Issue - State: closed - Opened by erenes 5 months ago - 3 comments

#1312 - Email notification for high severity alerts should be enabled: Validates that email notifications are off rather than on

Issue - State: closed - Opened by erenes 5 months ago - 3 comments

#1311 - [Preview]: Assign Built-In User-Assigned Managed Identity to Virtual Machines - Permissions issue when scoped to resource group.

Issue - State: open - Opened by phill-lewis 6 months ago - 3 comments

#1311 - [Preview]: Assign Built-In User-Assigned Managed Identity to Virtual Machines - Permissions issue when scoped to resource group.

Issue - State: open - Opened by phill-lewis 6 months ago - 3 comments

#1310 - Built-in Policy Release c0c6cca5

Pull Request - State: closed - Opened by gokmen-msft 6 months ago

#1310 - Built-in Policy Release c0c6cca5

Pull Request - State: closed - Opened by gokmen-msft 6 months ago

#1309 - Setup subscriptions to transition to an alternative vulnerability assessment solution - contains hardcoded location eastus

Issue - State: open - Opened by aavdberg 6 months ago

#1309 - Setup subscriptions to transition to an alternative vulnerability assessment solution - contains hardcoded location eastus

Issue - State: open - Opened by aavdberg 6 months ago

#1308 - Built-in Policy Release 42252151

Pull Request - State: closed - Opened by gokmen-msft 6 months ago

#1308 - Built-in Policy Release 42252151

Pull Request - State: closed - Opened by gokmen-msft 6 months ago

#1307 - Built-in Policy Release c88dad95

Pull Request - State: closed - Opened by gokmen-msft 6 months ago

#1307 - Built-in Policy Release c88dad95

Pull Request - State: closed - Opened by gokmen-msft 6 months ago

#1306 - Updated known issues list of resource types excluded from policy eval

Pull Request - State: open - Opened by shanhix1 6 months ago - 1 comment

#1306 - Updated known issues list of resource types excluded from policy eval

Pull Request - State: open - Opened by shanhix1 6 months ago - 1 comment

#1305 - Managed identity over-provisioning of RBAC role for policy 'Configure periodic checking for missing system updates on azure virtual machines'

Issue - State: open - Opened by eehret 6 months ago

#1305 - Managed identity over-provisioning of RBAC role for policy 'Configure periodic checking for missing system updates on azure virtual machines'

Issue - State: open - Opened by eehret 6 months ago

#1304 - Azure Policy Rules do not support Management Groups

Issue - State: open - Opened by s4parke 6 months ago - 3 comments

#1303 - [Preview]: Configure ChangeTracking Extension for Linux virtual machines: Azure Policy does not support Red Hat 9.*

Issue - State: open - Opened by neok-g 6 months ago

#1302 - Built-in Policy Release 051004b4

Pull Request - State: closed - Opened by gokmen-msft 6 months ago

#1302 - Built-in Policy Release 051004b4

Pull Request - State: closed - Opened by gokmen-msft 6 months ago

#1301 - DiagSettings_logAnalytics_firewall_DINE should support structured logs

Issue - State: open - Opened by azMantas 6 months ago

#1301 - DiagSettings_logAnalytics_firewall_DINE should support structured logs

Issue - State: open - Opened by azMantas 6 months ago

#1300 - Update StorageAccountAllowCrossTenantReplication_Audit.json

Pull Request - State: open - Opened by rasitha1 6 months ago

#1300 - Update StorageAccountAllowCrossTenantReplication_Audit.json

Pull Request - State: open - Opened by rasitha1 6 months ago

#1276 - Broken link in AKS Safeguards policy

Issue - State: closed - Opened by vegazbabz 8 months ago

#1273 - Enabling AKS Azure Policy Addon when workload identity is enabled. Pods start showing error "Multiple user assigned identities exist, please specify the clientId / resourceId of the identity in the token request"

Issue - State: closed - Opened by atedsimple 8 months ago - 1 comment

#1272 - Built-in Policy Release 3acc1063

Pull Request - State: closed - Opened by gokmen-msft 9 months ago

#1271 - CMMC 2.0 Level 2 (4e50fd13-098b-3206-61d6-d1d78205cb45) PolicySet - incorrect additionalMetadataId value

Issue - State: open - Opened by JulianHayward 9 months ago

#1271 - CMMC 2.0 Level 2 (4e50fd13-098b-3206-61d6-d1d78205cb45) PolicySet - incorrect additionalMetadataId value

Issue - State: open - Opened by JulianHayward 9 months ago

#1270 - Creating a complex policy to cross-reference two array fields

Issue - State: open - Opened by mbrijun 9 months ago

#1269 - There was an error processing your request. Try again in a few moments.

Issue - State: open - Opened by petercharleston 9 months ago

#1268 - ExcludeUsageCosts_Deny: Misspelling on Policy Description

Issue - State: open - Opened by fabianra21 9 months ago

#1267 - Update README.md

Pull Request - State: closed - Opened by mentat9 9 months ago

#1266 - Update known issues to include serverGroups

Pull Request - State: closed - Opened by kenieva 9 months ago

#1265 - Require a tag on resource groups: modify policyRule to exclude resourcegroup name auto-created from azure portal to avoid errors on deployment

Issue - State: open - Opened by paoIpao 9 months ago - 2 comments

#1264 - Built-In DeployIfNotExists policies for diagnostic settings on Table and Queue Storage is reporting faulty non-compliance

Issue - State: open - Opened by theautomationdude 9 months ago

#1263 - Azure Cognitive Search services should use customer-managed keys to encrypt data at rest: Does not function with Deny Effect

Issue - State: open - Opened by cmurrayjr 9 months ago

#1262 - Built-in Policy Release 79649856

Pull Request - State: closed - Opened by gokmen-msft 9 months ago

#1261 - Built-in Policy Release edcb38fa

Pull Request - State: closed - Opened by gokmen-msft 9 months ago

#1260 - Kubernetes cluster pods should only use approved host network and port range

Issue - State: open - Opened by roshithrajan 10 months ago

#1259 - Built-in policy "Configure Windows virtual machines to run Azure Monitor Agent with user-assigned managed identity-based authentication" does not accept values for "bringYourOwnUserAssignedManagedIdentity"

Issue - State: open - Opened by loewel 10 months ago

#1258 - Azure Update Manager policies do not support Red Hat 9

Issue - State: closed - Opened by neok-g 10 months ago - 3 comments

#1257 - AzureSecurityCenter.json - Missing effects from list of allowedValues in assignment parameters for multiple definitions

Issue - State: open - Opened by Dekor86 10 months ago - 1 comment

#1256 - Update AzureKeyVaultFirewallEnabled_Audit.json

Pull Request - State: closed - Opened by Musyoka534 10 months ago

#1255 - Update AzureKeyVaultFirewallEnabled_Audit.json

Pull Request - State: closed - Opened by Musyoka534 10 months ago

#1254 - Update repo owners

Pull Request - State: closed - Opened by robga 10 months ago

#1253 - Built-in Policy Release 3cfda2a2

Pull Request - State: closed - Opened by gokmen-msft 10 months ago

#1252 - Update AzureSecurityCenter.json - Missing effects from list of allowedValues in assignment parameters

Pull Request - State: closed - Opened by Dekor86 10 months ago - 4 comments

#1251 - Built-in Policy Release cbf95f4c

Pull Request - State: closed - Opened by pilor 10 months ago

#1250 - Built-in Policy Release cb9cc67d

Pull Request - State: closed - Opened by pilor 10 months ago

#1249 - Allow `csi` volumes in the Kubernetes restricted initiative

Issue - State: open - Opened by aelij 10 months ago - 1 comment

#1248 - Built-in policy "Configure Cognitive Services accounts to use private DNS zones" registers Azure OpenAI resources in the wrong zone

Issue - State: open - Opened by juanandmsft 10 months ago - 1 comment

#1247 - Update repo owners

Pull Request - State: closed - Opened by robga 10 months ago

#1246 - Video Analyzer accounts should use customer-managed keys to encrypt data at rest: property doesn't exist

Issue - State: open - Opened by jdgoeij 10 months ago - 1 comment

#1245 - Built-in policy "[Preview]: Configure Recovery Services vaults to use private DNS zones for backup" does not consider backup vault location

Issue - State: open - Opened by juanandmsft 10 months ago

#1244 - Built-in policy "Deploy - Configure IoT Central to use private DNS zones" only implements one of four required zones

Issue - State: open - Opened by juanandmsft 10 months ago

#1243 - Built-in Policy Release f9ebef38

Pull Request - State: closed - Opened by pilor 10 months ago

#1242 - Built-in Policy Release f98b9bcc

Pull Request - State: closed - Opened by pilor 11 months ago

#1241 - SWIFT CSP–CSCF v2024

Issue - State: open - Opened by mohdhaslan 11 months ago

#1240 - Bug: Incorrect assessment name in policy for SQL server vulnerability assessment

Issue - State: open - Opened by tyconsulting 11 months ago

#1239 - Update AKS_DisableRunCommand_Deploy.json

Pull Request - State: open - Opened by denniszielke 11 months ago - 5 comments

#1238 - Built-in Policy Release da9c6b7a

Pull Request - State: closed - Opened by pilor 11 months ago

#1237 - Azure policy to deny creation of second diagnostic setting if the first one already exists.

Issue - State: open - Opened by gmounica39 11 months ago - 1 comment

#1236 - Azure Service Bus auto scale event is blocked by Built-In policy "Azure Service Bus namespaces should have local authentication methods disabled"

Issue - State: open - Opened by specialenroute 11 months ago

#1235 - Built-in Policy Release ec549245

Pull Request - State: closed - Opened by pilor 11 months ago

#1234 - Start-AzPolicyRemediation: InvalidUpdateRemediationRequest

Issue - State: open - Opened by hoppipola004 11 months ago - 1 comment

#1233 - Built-in Policy Release 2ee49b41

Pull Request - State: closed - Opened by pilor 11 months ago

#1232 - Policy: Require Encryption on Data Lake Store - needs Audit

Issue - State: open - Opened by BevanSin 11 months ago

#1231 - Azure SQL Database should be running TLS version 1.2 or newer: not working as expected

Issue - State: open - Opened by chris-dnv 11 months ago - 1 comment

#1230 - Alias Request: Microsoft.RecoveryServices/vaults/resourceGuardProxies[*]/resourceGuardResourceId

Issue - State: open - Opened by mbrat2005 12 months ago

#1229 - Built-in Policy Release 70ec4c64

Pull Request - State: closed - Opened by pilor 12 months ago

#1228 - Create Namespaces_PublicNetworkAccess_AuditDeny.json

Pull Request - State: closed - Opened by george-guirguis 12 months ago - 1 comment

#1227 - "Managed disks should disable public network access" Should Allow Disabling All Network Access

Issue - State: open - Opened by gamullen 12 months ago

#1226 - MySQL and PostgreSQL support AAD rebranding in azure policy pages.

Pull Request - State: closed - Opened by linyudoa 12 months ago

#1225 - add publicNetworkAccess forMySQL Flexible server

Pull Request - State: closed - Opened by xiaoxuqi-ms 12 months ago

#1224 - Kubernetes Examples Release ff326952

Pull Request - State: closed - Opened by pilor 12 months ago

#1223 - Request: DINE policy for private endpoint -> private DNS zone linking with static webapps

Issue - State: open - Opened by rybal06 12 months ago - 7 comments

#1222 - Bump @babel/traverse from 7.15.4 to 7.23.2

Pull Request - State: closed - Opened by dependabot[bot] 12 months ago
Labels: dependencies

#1221 - Built-in Policy Release ff326952

Pull Request - State: closed - Opened by pilor 12 months ago

#1220 - MDC_DfSQL_DeployDefaultWorkspace: deployWorkspace property has too long prefix

Issue - State: open - Opened by p0llynomial almost 1 year ago

#1219 - AzureMonitor_DCRA_VM_Linux_Deploy: Potential bug with DCEs

Issue - State: closed - Opened by vijaytdh about 1 year ago - 2 comments

#1218 - Built-in Policy Release bf3a8ec5

Pull Request - State: closed - Opened by pilor about 1 year ago

#1217 - Built-in Policy Release f1b96242

Pull Request - State: closed - Opened by pilor about 1 year ago

#1216 - Deploy Dependency agent to be enabled on Windows virtual machines with Azure Monitoring Agent settings: Update list of supported Windows OSes for Dependency agent

Issue - State: open - Opened by kamfaima about 1 year ago

#1215 - Built-in Policy Release a8ed6eeb

Pull Request - State: closed - Opened by pilor about 1 year ago

#1214 - Enforce Tag on Resource Groups

Issue - State: open - Opened by clifpi about 1 year ago

#1213 - Built-in Policy Release 2d6b82a4

Pull Request - State: closed - Opened by pilor about 1 year ago

#1212 - Changes to apply Threat Protection Policy to NoSQL API Only

Pull Request - State: closed - Opened by AbhinavTrips about 1 year ago - 1 comment

#1211 - Deploy SQL DB transparent data encryption includes Synapse workspace databases in managed RGs

Issue - State: open - Opened by GitHubUser1339 about 1 year ago - 1 comment

#1210 - Built-in Policy Release 58e70da4

Pull Request - State: closed - Opened by pilor about 1 year ago

#1209 - [Preview]: Schedule recurring updates using Update Management Center

Issue - State: open - Opened by sajwvanzundert about 1 year ago

#1208 - Suggestion: KubernetesService/container-resource-limits

Issue - State: open - Opened by m8yng about 1 year ago

#1207 - Built-in Policy Release f9026ff6

Pull Request - State: closed - Opened by pilor about 1 year ago

#1206 - Built-in Policy Release cb2aa5af

Pull Request - State: closed - Opened by pilor about 1 year ago

#1205 - How to properly assign this policy to both Windows & Linux

Issue - State: open - Opened by runemy about 1 year ago

#1204 - Built-in Policy Release 60b6963d

Pull Request - State: closed - Opened by pilor about 1 year ago

#1203 - Configure Linux virtual machine to run Azure Monitor Agent using system-assigned managed identity: fails with typeHandlerVersion invalid

Issue - State: open - Opened by ofbjansen about 1 year ago - 2 comments

GitHub / Azure/azure-policy issues and pull requests