MikaelJcSoderberg

Feature Request - Deny-PublicPaaSEndpoints dont include deployments slots for App Services.

3

This policy set does not include a policy to handle deployment slots for App Services : Deny-PublicPaaSEndpoints A user can create a slot and expose the service.

Policy Set, Enforce-Guardrails-Network Bug Report

2

**Describe the bug** There are wrong values for this parameter : modifyNsgRuleAccess ` "modifyNsgRuleAccess": { "type": "string", "defaultValue": "Deny", "allowedValues": [ "Audit", "Deny", "Disabled" ] } ` It should be...

This policy is missing in the "default" list of policies: [Deny-Subnet-Without-Penp](https://github.com/Azure/Enterprise-Scale/blame/main/src/resources/Microsoft.Authorization/policyDefinitions/Deny-Subnet-Without-Penp.json) Without this setting being right, **private endpoints** in a subnet isn't filtered by the Network Security Group When I...

Bug Report - ALZ - Deny-PublicPaaSEndpoints

2

**Describe the bug** Deny-PublicPaaSEndpoints(5.1.0) contains a Deprecated policy Cognitive Services accounts should disable public network access https://www.azadvertizer.net/azpolicyadvertizer/0725b4dd-7e76-479c-a735-68e7ee23d5ca.html **Steps to reproduce** 1. 2. **Screenshots**

Bug Report - Enforce-EncryptTransit_20240509 contains the same policy twice.

2

**Describe the bug** This initative contains the same policy twice: https://www.azadvertizer.net/azpolicyinitiativesadvertizer/Enforce-EncryptTransit_20240509.html The duplicate is this one: https://www.azadvertizer.net/azpolicyadvertizer/0e80e269-43a4-4ae9-b5bc-178126b8a5cb.html **Steps to reproduce** 1. 2. **Screenshots**

Feature Request - Deploy-Private-DNS-Zones is missing policy for App Service Slots

2

**Describe the solution you'd like** I cant find a policy for you to include as part of Deploy-Private-DNS-Zones that would add the feature, so either the product team will need...