Bart Decker

Deprecated operationnames used in MS built-in policies -> "Microsoft.Security/securitySolutions/write" & "Microsoft.Security/securitySolutions/delete"

2

#### Details of the scenario you tried and the problem that is occurring I wonder if both operation names related to creating or removing a security solution are deprecated or...

Make aliases modifiable Microsoft.DocumentDB/databaseAccounts/disableKeyBasedMetadataWriteAccess It's used in MS built-in policy: /providers/Microsoft.Authorization/policyDefinitions/4750c32b-89c0-46af-bfcb-2e4541a818d5 (Azure Cosmos DB key based metadata write access should be disabled) But we can't add it into bicep code...

#### Details of the scenario you tried and the problem that is occurring I have an observation related to the MCSB built-in initiative. We parametrize all parameters within the initiative...

Policy question ESLZ platform foundation vs XXX Landing zone Accelerator

1

Quick question related to below quote. > The AKS Landing Zone Accelerator is only concerned with what gets deployed in the landing zone subscription highlighted by the red box in...