azure-policy

azure-policy copied to clipboard

New Zealand Information Security Manual policy: effect-b02aacc0-b073-424e-8298-42b22829ee0a is outdated

5

Currently the recommendation and included policy for the following in NZISM Azure Policy: effect-b02aacc0-b073-424e-8298-42b22829ee0a "Activity log should be retained for at least one year" Is outdated as it is referencing...

davidwhitenz

Hi, I have noticed an issue over the past couple of days in multiple Azure tenants where our enabled policy assignments with the 'Deny' effect are no longer preventing the...

EIT-Nathan

Alias request: Microsoft.Network/virtualNetworks/subnets[*].serviceEndpoints[*]

3

**Details of the scenario you tried and the problem that is occurring** Deny the creation of serviceEndpoints in all scenario's: Creation from virtual network/settings/subnets/ Creation from virtual network/settings/service endpoints **Suggested...

F-r-a-n-k-D

storage account failed to deploy

1

Hello, I see an issue in the built-in policy _Configure Synapse workspaces to have auditing enabled_ The template deployment of the storage account (generated name - in my deployment is:...

ptsouk

[Preview]: Configure Azure Key Vaults with private endpoints: Incorrectly reports resources as non-compliant

9

#### Details of the scenario you tried and the problem that is occurring The policy successfully detected and created a private endpoint for a Key Vault but keeps reporting the...

valtynikov

#### Details of the scenario you tried and the problem that is occurring Need to create policy preventing attachment of network interfaces to a subnet which hasn't been secured with...

krowlandson

#### Details of the scenario you tried and the problem that is occurring Need to create policy preventing attachment of network interfaces to a subnet which hasn't been secured with...

krowlandson

LogProfile audit builtin policy needs updating to audit diagnostic setting

1

#### Details of the scenario you tried and the problem that is occurring The builtin policy Logprofile_activityLogs_Audit.json targets the Event Hub and Storage Account configuration for subscription level activity logging....

BevanSin

Scenario : Enforcing minimal version for TLS Example : Only usage of TLS Version 1.2

wilfriedwoivre

Allow Microsoft.Web/sites/slots/privateEndpointConnections/privateLinkServiceConnectionState.status in templates

3

I am trying to now allow to check for policy with website slots private endpoint it is now allowed in both Azure and Azure Gov so should not flag as...

martyh888