Azure/azure-policy

Issues

• Enrich built-in policies with the deny effect

  #1403 opened a month ago by RoboK8
  0

• Configure virtual networks to enforce workspace, storage account and retention interval for Flow logs and Traffic Analytics: Needs to assess Microsoft.Network/networkWatchers/flowLogs/provisioningState

  #1402 opened a month ago by jcetina
  1

• 10a43735-527c-46f0-a95c-954a8f9594dc - Ensure 'Windows Firewall: Public: Settings: Apply local connection security rules' is set to 'Yes'

  #1401 opened 2 months ago by PresidentCamach0
  0

• Cannot limit allowed cognitive services types/kind

  #1400 opened 2 months ago by adameska
  1

• "Microsoft.KeyVault.Data" not supported for custom policies

  #1331 opened 7 months ago by lindbeck
  4

• Alias request: "Microsoft.SecurityCopilot/capacities/geo"

  #1398 opened 2 months ago by PieterbasNagengast
  0

• Enable logging by category group for Network security groups (microsoft.network/networksecuritygroups) to Event Hub: Non existent default option 'audit'

  #1397 opened 2 months ago by thedevopsjedi
  0

• Alias request: "Microsoft.Web/sites/eligibleLogCategories"

  #1395 opened 2 months ago by mortenlerudjordet
  1

• Do not apply "* should restrict network access" and "* should have firewall enabled" to Private-Link Resources

  #1392 opened 2 months ago by benjaminpieplow
  1

• Alias request: Microsoft.Compute/virtualMachineScaleSets/virtualMachineProfile.scheduledEventsProfile.terminateNotificationProfile

  #1393 opened 2 months ago by sdx-jkataja
  0

• Deploy export to Log Analytics workspace for Microsoft Defender for Cloud data: Issue with deployed policy via terraform

  #1390 opened 3 months ago by derchristian56
  0

• Correct the casing on the RoleDefintionIds

  #1387 opened 3 months ago by pmatthews05
  0

• Expected Value: 'siteConfig.minTlsVersion' should be 1.2

  #1385 opened 3 months ago by BoscoJohnson07
  0

• Behavior of the built-in policy “Azure AI Services resources should restrict network access”.

  #1384 opened 3 months ago by wada10
  0

• Configure Azure Defender for servers to be enabled : Why is deployment location hardcoded to westeurope?

  #1383 opened 3 months ago by cjtous1
  0

• Configure Backup Policies missing Ubuntu 24.04

  #1381 opened 3 months ago by jbarrancos
  0

• Request for alias to manage Microsoft.Security/securityContacts.emails

  #1378 opened 4 months ago by KrzysztofParys
  0

• Question:

  #1375 opened 4 months ago by dheeban0111
  0

• Question: Why is the deny/block public access policy for Cognitive services deprecated?

  #1374 opened 4 months ago by odee79
  0

• Wildcard use in role and cluster role policy does not support list of exclude clusterrole.

  #1372 opened 4 months ago by sumanraja
  0

• Feature tracker: Data Replication for Custom Policy

  #1371 opened 4 months ago by anlandu
  0

• Audit diagnostic setting for selected resource types: false positive for `microsoft.automation/automationaccounts`, `microsoft.keyvault/vaults`, and `microsoft.network/publicipaddresses`

  #1370 opened 4 months ago by sanderaernouts
  0

• Audit diagnostic setting for selected resource types: false positive for `microsoft.network/networkinterfaces`

  #1369 opened 4 months ago by sanderaernouts
  0

• Connection string related policy not working | Microsoft.Web/sites/siteConfig.connectionStrings

  #1368 opened 4 months ago by Sermandurai-Azure
  1

• Sample Custom policy to deny any secret creation without expiration date which is 180 days more/less than creation date

  #1365 opened 4 months ago by khushbu985
  0

• [azure-policy-vscode-extension][bug] : Extension fails to initialize when Azure Account@0.12.0 is installed

  #1362 opened 5 months ago by asilverman
  2

• [azure-policy-vscode-extension][Feature Request]: Add Policy JSON Schema Validation as Part of the Extension

  #1363 opened 5 months ago by asilverman
  0

• Feature Request: Please consider adding a label `azure-policy-vscode-extension`

  #1361 opened 5 months ago by asilverman
  0

• Azure Machine Learning CMK policy bug

  #1344 opened 5 months ago by HermenOtter
  0

• Incorrect Description in Policy Set Definition

  #1358 opened 5 months ago by stefanstranger
  0

• Make aliases modifiable

  #1356 opened 5 months ago by nuts2890
  0

• Azure Policy Rules do not support Management Groups

  #1304 opened 9 months ago by s4parke
  3

• ASC_ChangeTrackingWindowsAgent_DINE missing support for Win11

  #1347 opened 5 months ago by tsunami28
  0

• [Preview]: Assign Built-In User-Assigned Managed Identity to Virtual Machines - Permissions issue when scoped to resource group.

  #1311 opened 8 months ago by phill-lewis
  3

• Storage accounts should restrict network access using virtual network rules: Doesn't check if PublicNetworkAccess is disabled

  #1345 opened 5 months ago by fcm1997
  0

• Support for SnowflakeV2 allowedValues parameter using builtin assignment ADF_allowed_linked_service_resource_types

  #1334 opened 6 months ago by luca-gervasi-od
  0

• Provide parameters to Audit or Disable the scan of Microsoft Defender options

  #1333 opened 7 months ago by JamesDLD
  0

• Issue of "Azure SQL Database should be running TLS version 1.2 or newer"

  #1330 opened 7 months ago by yangchengs
  0

• Support for Machine Learning/AllowedPythonPackageChannels_EnforceSetting

  #1324 opened 7 months ago by emad0082
  0

• Email notification for high severity alerts should be enabled: Validates that email notifications are off rather than on

  #1318 opened 7 months ago by mattias-fjellstrom
  1

• Microsoft.MachineLearningServices/workspaces/computes not recognizable

  #1323 opened 7 months ago by jayendranarumugam
  1

• Email notification for high severity alerts should be enabled: Validates that email notifications are off rather than on

  #1312 opened 8 months ago by erenes
  3

• Setup subscriptions to transition to an alternative vulnerability assessment solution - contains hardcoded location eastus

  #1309 opened 8 months ago by aavdberg
  0

• Managed identity over-provisioning of RBAC role for policy 'Configure periodic checking for missing system updates on azure virtual machines'

  #1305 opened 9 months ago by eehret
  0

• [Preview]: Configure ChangeTracking Extension for Linux virtual machines: Azure Policy does not support Red Hat 9.*

  #1303 opened 9 months ago by neok-g
  0

• DiagSettings_logAnalytics_firewall_DINE should support structured logs

  #1301 opened 9 months ago by azMantas
  0

• Storage accounts - cross tenant object replication policy should get updated to reflect the new behavior

  #1299 opened 9 months ago by rasitha1
  0

• Policy effect types are declared twice

  #1298 opened 9 months ago by gerbermarco
  0

• "[Preview]: Assign Built-In User-Assigned Managed Identity to Virtual Machines" for a UAMI in another subscription

  #1297 opened 9 months ago by joaosa-microsoft
  0

• Over-priviledged managed identity - role definition ID should be changed

  #1291 opened 10 months ago by KennethMLdk
  0