From e2192104344879afe9e5a48161577f0e43e4a5ba Mon Sep 17 00:00:00 2001
From: Sacha Narinx <springstone@outlook.com>
Date: Tue, 2 Jul 2024 17:00:24 +0400
Subject: [PATCH] chore: Update Enforce-Guardrails-Network policySetDefinitions
 to version 1.1.0

---
 docs/wiki/Whats-new.md                                     | 4 ++++
 .../policySetDefinitions/Enforce-Guardrails-Network.json   | 7 +++----
 2 files changed, 7 insertions(+), 4 deletions(-)

diff --git a/docs/wiki/Whats-new.md b/docs/wiki/Whats-new.md
index 9ee6e32d65..9cf9468712 100644
--- a/docs/wiki/Whats-new.md
+++ b/docs/wiki/Whats-new.md
@@ -46,6 +46,10 @@ This article will be updated as and when changes are made to the above and anyth
 
 Here's what's changed in Enterprise Scale/Azure Landing Zones:
 
+### 🔃 Policy Refresh Q1 FY25
+
+- Fixed parameter allowed values for `modifyNsgRuleAccess` in the [Enforce-Guardrails-Network](https://www.azadvertizer.net/azpolicyinitiativesadvertizer/Enforce-Guardrails-Network.html) initiative.
+
 ### June 2024
 
 #### Documentation
diff --git a/src/resources/Microsoft.Authorization/policySetDefinitions/Enforce-Guardrails-Network.json b/src/resources/Microsoft.Authorization/policySetDefinitions/Enforce-Guardrails-Network.json
index a90c9872ab..64d4afca19 100644
--- a/src/resources/Microsoft.Authorization/policySetDefinitions/Enforce-Guardrails-Network.json
+++ b/src/resources/Microsoft.Authorization/policySetDefinitions/Enforce-Guardrails-Network.json
@@ -8,7 +8,7 @@
         "displayName": "Enforce recommended guardrails for Network and Networking services",
         "description": "This policy initiative is a group of policies that ensures Network and Networking services are compliant per regulated Landing Zones.",
         "metadata": {
-            "version": "1.0.0",
+            "version": "1.1.0",
             "category": "Network",
             "source": "https://github.com/Azure/Enterprise-Scale/",
             "alzCloudEnvironments": [
@@ -229,9 +229,8 @@
                 "type": "string",
                 "defaultValue": "Deny",
                 "allowedValues": [
-                    "Audit",
-                    "Deny",
-                    "Disabled"
+                    "Allow",
+                    "Deny"
                 ]
             },
             "modifyNsgRuleProtocol": {