neok-g

Log categories "Deploy Diagnostic Settings for Recovery Services Vault to Log Analytics workspace for resource specific categories."

16

The built-in policy Deploy Diagnostic Settings for Recovery Services Vault to Log Analytics workspace for resource specific categories only checks the logcategories: "CoreAzureBackup", "AddonAzureBackupJobs", "AddonAzureBackupAlerts", "AddonAzureBackupPolicy", "AddonAzureBackupStorage", "AddonAzureBackupProtectedInstance" However a...

Remediation not working for policy Deploys NSG flow logs and traffic analytics to a storageaccountid with a specfied retention period.

16

Describe the bug Remediation for the policy 'Deploys NSG flow logs and traffic analytics to a storageaccountid with a specfied retention period.' does not work. The error is: Reason No...

Policydefinition Enable diagnostics for resources does not have param for keyvault metrics

7

The policy definition Enable diagnostics for resources uses the built-in policy Deploy Diagnostic Settings for Key Vault to Log Analytics workspace. This policy has parameters logsEnabled (default value: true) and...

The policy Deploy a flow log resource with target network security group (/providers/Microsoft.Authorization/policyDefinitions/0db34a60-64f4-4bf6-bd44-f95c16cf34b9) contains a hardcoded value for retention (in days) of zero. Morover the option for Traffic Analysis cannot...

How do policies work with parameter listOfLinuxImageIdToInclude or listOfWindowsImageIdToInclude

2

There are several monitoring related policies which evaluate VM's or VMSS whether to install the dependency agent, log analytics monitoring agent or the new Azure Monitor agent. We currently use...

Log categories "Deploy Diagnostic Settings for Recovery Services Vault to Log Analytics workspace for resource specific categories."

1

The built-in policy Deploy Diagnostic Settings for Recovery Services Vault to Log Analytics workspace for resource specific categories only checks the logcategories: "CoreAzureBackup", "AddonAzureBackupJobs", "AddonAzureBackupAlerts", "AddonAzureBackupPolicy", "AddonAzureBackupStorage", "AddonAzureBackupProtectedInstance" However a...

[Preview]: Assign Built-In User-Assigned Managed Identity to Virtual Machines contains hardcoded location

4

The policies below contain a hardcoded location of 'EASTUS' which causes compliancy issues, because for some organisations this location might not be allowed. The location seems to be used amongst...

Azure Policy does not support Red Hat 9.*

1

The policy below does not support Red Hat 9: [Configure backup on virtual machines with a given tag to an existing recovery services vault in the same location](https://www.azadvertizer.net/azpolicyadvertizer/345fa903-145c-4fe1-8bcd-93ec2adccde8.html) Could you...

The policy below does not support Red Hat 9: [[Preview]: Configure ChangeTracking Extension for Linux virtual machines](https://www.azadvertizer.net/azpolicyadvertizer/ec88097d-843f-4a92-8471-78016d337ba4.html) Could you please add support for Red Hat 9

PIM active role assignments

3

**AzGovViz version** 6.4.5. **CodeRunPlatform** Azure DevOps **Describe the bug** I am examining the report 'Role assignment related entries' and specially looking for **_active_** role assignments managed in PIM. They seem...