Azure/azure-policy issues and pull requests

#1202 - Fix a typo, change specifc to specific

Pull Request - State: closed - Opened by Expecho about 1 year ago - 1 comment

#1201 - MachineLearningServices_ComputeInstanceUpdates_Audit

Issue - State: open - Opened by schumixmd about 1 year ago - 1 comment

#1200 - Can we have lessthan,greater than, lessthan or equalto, greater than equalto operators available in azure policies.

Issue - State: open - Opened by githubofkrishnadhas about 1 year ago

#1199 - Adding MicrosoftSQLServer-WS2022 Image offer missing from detection to Azure Backup and Security Center related policies

Pull Request - State: closed - Opened by haflidif about 1 year ago - 2 comments

#1198 - VirtualMachineWithTag_Backup_Deploy: Doesn't detect MicrosoftSQLServer on WS2022

Issue - State: open - Opened by haflidif about 1 year ago

#1197 - VirtualMachineBackup_Backup_DeployIfNotExists: Doesn't detect MicrosoftSQLServer on WS2022

Issue - State: open - Opened by haflidif about 1 year ago

#1196 - Built-in Policy Release f3bb6afa

Pull Request - State: closed - Opened by pilor about 1 year ago

#1195 - HIPAA_HITRUST_audit : Diag settings for KeyVaults

Issue - State: open - Opened by AZMadeEZ about 1 year ago - 1 comment

#1194 - App Service apps should disable public network access: Does not work with private endpoints

Issue - State: open - Opened by audunsolemdal about 1 year ago

#1193 - HIPAA_HITRUST_audit : DeployDiagnosticSettingsforNetworkSecurityGroups

Issue - State: open - Opened by AZMadeEZ about 1 year ago

#1192 - HIPAA_HITRUST_audit : networkSecurityGroupsOnSubnetsMonitoring

Issue - State: open - Opened by AZMadeEZ about 1 year ago - 1 comment

#1191 - Built-in Policy Release f2126eef

Pull Request - State: closed - Opened by pilor about 1 year ago

#1190 - Kubernetes Examples Release 49d507e3

Pull Request - State: closed - Opened by pilor about 1 year ago

#1189 - Azure Kubernetes Clusters should enable Key Management Service (KMS): evaluates incorrectly for clusters with system-assigned managed identity

Issue - State: open - Opened by v1adev about 1 year ago

#1188 - Update Known Issues

Pull Request - State: closed - Opened by mentat9 about 1 year ago

#1187 - Make aliases modifiable Microsoft.DocumentDB/databaseAccounts/disableKeyBasedMetadataWriteAccess

Issue - State: open - Opened by BartDecker about 1 year ago

#1186 - Built-in Policy Release 49d507e3

Pull Request - State: closed - Opened by pilor about 1 year ago

#1185 - Azure Kubernetes Service Private Clusters should be enabled: When enforcment mode is Deny, blocks deployment of Azure Monitor even if cluster is private

Issue - State: open - Opened by eehret about 1 year ago

#1184 - Updated the known issues in two places.

Pull Request - State: closed - Opened by sehoff16 about 1 year ago - 3 comments

#1183 - Bump word-wrap from 1.2.3 to 1.2.4

Pull Request - State: closed - Opened by dependabot[bot] about 1 year ago
Labels: dependencies

#1182 - Update README.md

Pull Request - State: closed - Opened by robga about 1 year ago

#1181 - Built-in Policy Release dd153f5c

Pull Request - State: closed - Opened by pilor about 1 year ago

#1180 - Add effect to DiagnosticSettingsForTypes policy

Pull Request - State: closed - Opened by BoSoeborgPetersen about 1 year ago - 1 comment

#1179 - Add effect to policies

Issue - State: open - Opened by BoSoeborgPetersen about 1 year ago - 1 comment

#1178 - Add Deny effect to GeoRedundant_StorageAccounts policy

Pull Request - State: closed - Opened by BoSoeborgPetersen about 1 year ago - 1 comment

#1177 - Add effect to ResourceGroupRequireTagAndValue policy

Pull Request - State: closed - Opened by BoSoeborgPetersen about 1 year ago - 1 comment

#1176 - Add effect to ResourceGroupRequireTag policy

Pull Request - State: closed - Opened by BoSoeborgPetersen about 1 year ago - 1 comment

#1175 - Add effect to RequireTagAndValue policy

Pull Request - State: closed - Opened by BoSoeborgPetersen about 1 year ago - 1 comment

#1174 - Add effect to RequireTag policy

Pull Request - State: closed - Opened by BoSoeborgPetersen about 1 year ago - 1 comment

#1173 - Add effect to ResourcesInResourceGroupLocation policy

Pull Request - State: closed - Opened by BoSoeborgPetersen about 1 year ago - 1 comment

#1172 - Add effect to ResourceGroupAllowedLocations policy

Pull Request - State: closed - Opened by BoSoeborgPetersen about 1 year ago - 1 comment

#1171 - Add effect to AllowedLocations policy

Pull Request - State: closed - Opened by BoSoeborgPetersen about 1 year ago - 1 comment

#1170 - Alias Request: Microsoft.Insights/Components/pricingPlans/cap

Issue - State: open - Opened by audunsolemdal about 1 year ago

#1169 - Can't retrieve the name property of Network Security Rule during policy evaluation

Issue - State: open - Opened by eehret about 1 year ago

#1168 - Update AKS_CSI.json

Pull Request - State: closed - Opened by pjlewisuk about 1 year ago - 1 comment

#1167 - Update AKS_GuardrailsMustHaveAntiAffinityRulesSet.json

Pull Request - State: closed - Opened by pjlewisuk about 1 year ago - 1 comment

#1166 - Built-in Policy Release 2639a998

Pull Request - State: closed - Opened by pilor about 1 year ago

#1165 - Bump tough-cookie from 4.0.0 to 4.1.3

Pull Request - State: closed - Opened by dependabot[bot] about 1 year ago
Labels: dependencies

#1164 - Built-in Policy Release c062cc99

Pull Request - State: closed - Opened by pilor over 1 year ago

#1163 - "App Service apps should disable public network access" breaks apps deployed to private App Service Plans without Private Endpoints

Issue - State: open - Opened by sjwaight over 1 year ago

#1161 - Add "flux-system" in default value of excludedNamespaces in kubernetes AllowedHostPaths

Issue - State: open - Opened by prabhumathiyalagan over 1 year ago

#1160 - Update README.md

Pull Request - State: closed - Opened by kenieva over 1 year ago

#1159 - Built-in Policy Release 8ada6600

Pull Request - State: closed - Opened by pilor over 1 year ago

#1158 - Alias request to be modifiable: Microsoft.Insights/components/IngestionMode

Issue - State: open - Opened by algignac over 1 year ago

#1157 - Alias request: Microsoft.SerialConsole/consoleServices/default.disabled

Issue - State: open - Opened by sean-keane25 over 1 year ago - 1 comment
Labels: alias-request

#1156 - Built-in Policy Release 2d7e0245

Pull Request - State: closed - Opened by pilor over 1 year ago

#1155 - Built-in policy "Configure a private DNS Zone ID for web groupID" wrongly applies to Azure Synapse Private Link Hubs private endpoints

Issue - State: open - Opened by juanandmsft over 1 year ago - 1 comment

#1154 - Built-in policy "Configure a private DNS Zone ID for table groupID" wrongly applies to Azure CosmosDB for table private endpoints

Issue - State: open - Opened by juanandmsft over 1 year ago

#1153 - Configure Azure PaaS services to use private DNS zones: Policies missing from initiative to configure Private Link and DNS integration at scale

Issue - State: closed - Opened by juanandmsft over 1 year ago - 1 comment

#1152 - support "mode": "Microsoft.KeyVault.Data" for custom policy for keyVault secrets

Issue - State: closed - Opened by nilayptl94 over 1 year ago - 1 comment

#1151 - Built-in Policy Release 6cc4d6f9

Pull Request - State: closed - Opened by pilor over 1 year ago

#1150 - Deprecated operationnames used in MS built-in policies -> "Microsoft.Security/securitySolutions/write" & "Microsoft.Security/securitySolutions/delete"

Issue - State: open - Opened by BartDecker over 1 year ago - 2 comments

#1149 - App Service apps should only be accessible over HTTPS: Triggers when cloning compliant apps

Issue - State: open - Opened by chris-dnv over 1 year ago

#1148 - Built-in Policy Release b68588c9

Pull Request - State: closed - Opened by pilor over 1 year ago

#1147 - Built-in Policy Release 1632a449

Pull Request - State: closed - Opened by pilor over 1 year ago

#1146 - Naming consistency on backup related preview policies

Issue - State: open - Opened by SteveBurkettNZ over 1 year ago

#1145 - Audit Windows machines that are not joined to the specified domain: Multiple domains required

Issue - State: open - Opened by DKSaxo over 1 year ago

#1144 - Policy to deny ahub in Vms

Issue - State: open - Opened by rafabiasotto over 1 year ago - 3 comments

#1143 - Kubernetes Examples Release 3d5fb819

Pull Request - State: closed - Opened by pilor over 1 year ago

#1142 - Update LinkedService_ResourceType_Audit.json

Pull Request - State: closed - Opened by p33ves over 1 year ago - 3 comments

#1141 - Built-in Policy Release 3d5fb819

Pull Request - State: closed - Opened by pilor over 1 year ago

#1140 - Added Microsoft.Insights/workbooks collection GET to known issues

Pull Request - State: closed - Opened by shanhix1 over 1 year ago

#1139 - Built-in Policy Release 80586591

Pull Request - State: closed - Opened by pilor over 1 year ago

#1138 - Make Alias Modifiable: Microsoft.ContainerService/managedClusters/apiServerAuthorizedIPRanges[*]

Issue - State: open - Opened by abelal83 over 1 year ago

#1137 - Microsoft cloud security benchmark Lifecycle - Policy Additions lacking parameter

Issue - State: open - Opened by BartDecker over 1 year ago

#1136 - ContainerNoPrivilegeEscalation: consider securityContext at Pod spec

Issue - State: open - Opened by 0x4c6565 over 1 year ago

#1135 - Built-in Policy Release f4af809e

Pull Request - State: closed - Opened by pilor over 1 year ago

#1134 - Disallow public bloc access policy name confusion

Pull Request - State: closed - Opened by schumixmd over 1 year ago - 2 comments

#1133 - Built-in Policy Release d07929ed

Pull Request - State: closed - Opened by pilor over 1 year ago

#1132 - Exempt Azure policy for AD Users in specific AD group?

Issue - State: open - Opened by smartaquarius10 over 1 year ago - 2 comments

#1131 - Update Cosmos_NetworkRulesExist_Audit.json

Pull Request - State: closed - Opened by Dylan-Prins over 1 year ago - 1 comment

#1127 - Inherit a tag from the resource group if missing: Managed Identity Permission

Issue - State: open - Opened by psinnathurai over 1 year ago - 5 comments

#1110 - PolicyName: Configure Windows virtual machines to run Azure Monitor Agent using system-assigned managed identity

Issue - State: open - Opened by realolap over 1 year ago - 1 comment

#1099 - Configure SQL Server to use private DNS zones

Issue - State: open - Opened by anwarnk over 1 year ago - 5 comments

#1099 - Configure SQL Server to use private DNS zones

Issue - State: open - Opened by anwarnk over 1 year ago - 5 comments

#1088 - Azure Policy with Deny effect doesn't prevent modification/update of resources against the policy.

Issue - State: open - Opened by aquibchiniwala over 1 year ago - 1 comment

#1087 - AzureMonitor_DCRA_VMSS_Linux_Deploy: Syntax Error Prevents Successful Remediation

Issue - State: open - Opened by dkeisen over 1 year ago - 1 comment

#1084 - Add support for Sweden Central region to Azure Arc-related policies

Pull Request - State: closed - Opened by guidemetothemoon over 1 year ago - 5 comments

#1078 - blinQ: Fix issue with wrong compliance state for blob storage with no table services.

Pull Request - State: closed - Opened by heintonny over 1 year ago - 4 comments

#1075 - Fix App Service Virtual Network Service Endpoint Docs Url

Pull Request - State: closed - Opened by charlesbetros almost 2 years ago - 1 comment

#1070 - ASC_MicrosoftDefenderForEndpoint_WindowsAgent_VM_Deploy: Assignment on ResourceGroup level - insufficient right for 'Microsoft.Security/mdeOnboardings/read'

Issue - State: open - Opened by Asthmatics almost 2 years ago - 3 comments

#1067 - Kubernetes_PSPRestrictedStandard: allowedVolumeTypes does not include "csi" type?

Issue - State: open - Opened by brahmiam almost 2 years ago - 1 comment

#1063 - Wildcard for listOfWindowsImageIdToInclude Param

Pull Request - State: closed - Opened by Asthmatics almost 2 years ago - 2 comments

#1057 - Update NIST_SP_800-171_R2.json

Pull Request - State: closed - Opened by danielrbates almost 2 years ago - 1 comment

#1051 - Microsoft.Authorization/roleAssignments/scope alias doesn't work for management groups

Issue - State: closed - Opened by Dushelov almost 2 years ago - 3 comments

#1050 - Feature request: Consider using EvaluationDelay:AfterProvisioningSuccess for Built in private DNS policies

Issue - State: open - Opened by anwojcie almost 2 years ago - 2 comments

#1049 - Built in Policy - ML Studio private DNS zones - not working

Issue - State: closed - Opened by anwojcie almost 2 years ago - 2 comments

#1047 - [Preview]: Configure periodic checking for missing system updates on azure Arc-enabled servers

Issue - State: open - Opened by rickelder123 almost 2 years ago - 2 comments

#1033 - Missing Microsoft.ServiceHealth tag for Azure Policy

Issue - State: closed - Opened by oliverlabs almost 2 years ago - 3 comments

#1030 - Update AppService_PrivateZoneGroup_DINE.json

Pull Request - State: closed - Opened by marcusfriede almost 2 years ago - 2 comments

#1016 - Update DependencyAgentExtension_Windows_VM_Deploy Policy

Issue - State: open - Opened by seblemieux about 2 years ago - 1 comment

#1004 - [Preview]: Assign Built-In User-Assigned Managed Identity to Virtual Machines contains hardcoded location

Issue - State: open - Opened by neok-g about 2 years ago - 3 comments

#995 - Built-in policies for Diagnostic Settings to Event Hub missing Event Hub name

Issue - State: closed - Opened by vegazbabz about 2 years ago - 3 comments

#986 - Parameters/Evaluation: Configure diagnostic settings for storage accounts to Log Analytics workspace

Issue - State: open - Opened by J0F3 about 2 years ago - 10 comments

#979 - Cosmos_DisableMetadata_Append.json: Clarify description

Issue - State: open - Opened by seesharprun about 2 years ago - 1 comment

#979 - Cosmos_DisableMetadata_Append.json: Clarify description

Issue - State: open - Opened by seesharprun about 2 years ago - 1 comment

#969 - Can't find AzureOSBaseline Module

Issue - State: open - Opened by schoudhary22 over 2 years ago - 2 comments
Labels: guest-configuration

#968 - Compliance and delegation of Azure Locks through Azure Policy (#1)

Pull Request - State: closed - Opened by JamesDLD over 2 years ago - 2 comments

#943 - Make aliases modifiable

Issue - State: open - Opened by ioeifcss over 2 years ago - 5 comments
Labels: alias-request

#872 - Deploy - Diagnostic Settings SQL Server should exclude Synapse Workspace under water SQL Server

Issue - State: open - Opened by spoelly almost 3 years ago - 1 comment

GitHub / Azure/azure-policy issues and pull requests