Enterprise-Scale icon indicating copy to clipboard operation
Enterprise-Scale copied to clipboard

Data Factory Custom Policies

Open marvinbuss opened this issue 4 years ago • 2 comments

Overview/Summary

Replace this with a brief description of what this Pull Request fixes, changes, etc.

This PR fixes/adds/changes/removes

  1. Added Data Factory Custom Policies

As part of this Pull Request I have

  • [x] Checked for duplicate Pull Requests
  • [x] Associated it with relevant issues, for tracking and closure.
  • [x] Ensured my code/branch is up-to-date with the latest changes in the main branch
  • [x] Performed testing and provided evidence.
  • [ ] Updated relevant and associated documentation.
  • [ ] Updated the "What's New?" wiki page (located: /docs/wiki/whats-new.md)

marvinbuss avatar Aug 26 '21 11:08 marvinbuss

@jtracey93

Azure Data Factory

Policy Name Policy Area Description
Deny-DataFactory-ApiVersion Resource Management Denies old API version for data factory V1.
Deny-DataFactory-IdentityType Authentication Enforces use of system assigned identity for data factory.
Deny-DataFactory-IntegrationRuntimeManagedVirtualNetwork Network Isolation Denies Integration Runtimes that are not connected to the Managed Virtual Network.
Deny-DataFactory-ManagedPrivateEndpoints Network Isolation Denies external private endpoints for linked services.
Deny-DataFactory-PublicNetworkAccess Network Isolation Denies public access to data factory.
Deploy-DataFactory-ManagedVirtualNetwork Network Isolation Deploy managed virtualnetwork for data factory.

marvinbuss avatar Aug 26 '21 11:08 marvinbuss

@krnese I would enforce the following on the Corp Management Group:

Deny-DataFactory-PublicNetworkAccess

I would like to enforce more, but this will be difficult to manage.

marvinbuss avatar Aug 26 '21 11:08 marvinbuss

  • Closing as superseded by #1144

krowlandson avatar Nov 30 '22 14:11 krowlandson