Policy Refresh H2 FY24 #1651

Springstone · 2024-05-29T10:01:58Z

Overview/Summary

This is the H2 FY24 Policy Refresh!

Testing URLs

Azure Public

As part of this Pull Request I have

Checked for duplicate Pull Requests
Associated it with relevant issues, for tracking and closure.
Ensured my code/branch is up-to-date with the latest changes in the main branch
Performed testing and provided evidence.
Ensured contribution guidance is followed.
Updated relevant and associated documentation.
Updated the "What's New?" wiki page (located: /docs/wiki/whats-new.md)

Co-authored-by: github-actions <41898282+github-actions[bot]@users.noreply.github.com>

Co-authored-by: Recep Ozkurt <[email protected]> Co-authored-by: github-actions <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: Sacha Narinx <[email protected]> Co-authored-by: Jack Tracey <[email protected]>

… policy-refresh-q3fy24

Co-authored-by: github-actions <41898282+github-actions[bot]@users.noreply.github.com>

Co-authored-by: JamJarchitect <[email protected]> Co-authored-by: github-actions <41898282+github-actions[bot]@users.noreply.github.com>

Co-authored-by: Recep Ozkurt <[email protected]> Co-authored-by: github-actions <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: Sacha Narinx <[email protected]> Co-authored-by: Jack Tracey <[email protected]>

… policy-refresh-q3fy24

…rability Assessment Provider (#1577) Co-authored-by: github-actions <41898282+github-actions[bot]@users.noreply.github.com>

…ivate DNS zone. (#1618) Co-authored-by: Sacha Narinx <[email protected]> Co-authored-by: github-actions <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: Jack Tracey <[email protected]>

Co-authored-by: github-actions <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: Jack Tracey <[email protected]>

Co-authored-by: github-actions <41898282+github-actions[bot]@users.noreply.github.com>

…ct (#1643)

Co-authored-by: github-actions <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: Sacha Narinx <[email protected]>

…icy (#1650) Co-authored-by: Jack Tracey <[email protected]>

…rity) (#1648)

jtracey93

2 changes please @Springstone & @arjenhuitema to the docs and then I think we are good.

I have also tested an upgrade deployment and am happy 😄 so just the docs piece and we are good to merge and release

Cc: @paulgrimley

docs/wiki/Whats-new.md

… policies when utilizing Portal, ARM, or Bicep.

Co-authored-by: Jack Tracey <[email protected]>

nekdima · 2024-06-24T09:16:56Z

Hey Team, could you please update Excel (ALZ Policy Assignments v2) with new policies?
https://github.com/Azure/Enterprise-Scale/wiki/ALZ-Policies

Springstone · 2024-06-24T11:58:35Z

Hey Team, could you please update Excel (ALZ Policy Assignments v2) with new policies? https://github.com/Azure/Enterprise-Scale/wiki/ALZ-Policies

@nekdima please note the Excel only includes policies we assign by default. The new policies and initiatives are not enabled by default and require selecting scopes to apply at. We'll look at an additional Excel that includes all ALZ policies/initiatives regardless of assignment in a future update.

jtracey93 and others added 17 commits March 7, 2024 10:27

Update display name for Audit-PrivateLinkDnsZones policy (#1592)

281f03f

Co-authored-by: github-actions <41898282+github-actions[bot]@users.noreply.github.com>

Private DNS Zones- Bug Fix1485 (#1578)

f002346

Co-authored-by: Recep Ozkurt <[email protected]> Co-authored-by: github-actions <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: Sacha Narinx <[email protected]> Co-authored-by: Jack Tracey <[email protected]>

Merge branch 'main' of https://github.com/Azure/Enterprise-Scale into…

805f537

… policy-refresh-q3fy24

Portal Fixes (#1597)

9887791

Trusted Launch Initiative added (#1605)

360f0a2

Co-authored-by: github-actions <41898282+github-actions[bot]@users.noreply.github.com>

Backup initiative (#1601)

651f57a

Co-authored-by: JamJarchitect <[email protected]> Co-authored-by: github-actions <41898282+github-actions[bot]@users.noreply.github.com>

Fix on GH issue #1486 (#1621)

b646a5d

Co-authored-by: Recep Ozkurt <[email protected]> Co-authored-by: github-actions <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: Sacha Narinx <[email protected]> Co-authored-by: Jack Tracey <[email protected]>

Merge branch 'main' of https://github.com/Azure/Enterprise-Scale into…

79c74f4

… policy-refresh-q3fy24

Defender for Cloud provisioning cleanup - remove D4C DNS and VM Vulne…

21908c0

…rability Assessment Provider (#1577) Co-authored-by: github-actions <41898282+github-actions[bot]@users.noreply.github.com>

New generic policy for PaaS resources private endpoint to override Pr…

e2264bf

…ivate DNS zone. (#1618) Co-authored-by: Sacha Narinx <[email protected]> Co-authored-by: github-actions <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: Jack Tracey <[email protected]>

New Feature: Workload Specific Compliance (#1622)

0074785

Co-authored-by: github-actions <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: Jack Tracey <[email protected]>

Updating Microsoft Defender for Endpoints to use new initiative (#1639)

97022e9

Co-authored-by: github-actions <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: Jack Tracey <[email protected]>

Diagnostic Settings v2 🎉 (#1641)

fbfba91

Co-authored-by: github-actions <41898282+github-actions[bot]@users.noreply.github.com>

Hotfix: Minor assignment HotFix to address repeated deployment confli…

569c6af

…ct (#1643)

AMA Updates (#1649)

000fcd2

Co-authored-by: github-actions <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: Sacha Narinx <[email protected]>

feat: Add evaluationDelay paramter for Deploy-Private-DNS-Generic pol…

f4576ea

…icy (#1650) Co-authored-by: Jack Tracey <[email protected]>

Hotfix: previously updated policy not updated in initiative (low prio…

dbbe628

…rity) (#1648)

Springstone requested review from a team as code owners May 29, 2024 10:01

Springstone had a problem deploying to csu-rw May 29, 2024 10:02 — with GitHub Actions Error

Updated initiatives.json (#1652)

abfe29a

Springstone had a problem deploying to csu-rw May 29, 2024 10:18 — with GitHub Actions Error

Fix for updated policy in Deploy-SQL-Security (#1654)

42e0111

jtracey93 had a problem deploying to csu-rw May 29, 2024 13:15 — with GitHub Actions Error

Update-policy-doc (#1653)

ab149c8

Springstone had a problem deploying to csu-rw May 29, 2024 13:45 — with GitHub Actions Failure

Springstone added this to the policy-refresh-fy24-h2 milestone May 29, 2024

Springstone added Area: Logging & Automation 📷 Issues / PR's related to Logging & Automation Area: Policy 📝 Issues / PR's related to Policy Needs: Upstream Policy Changes 🔃 Upstream ESLZ repo policy changes required labels May 30, 2024

Springstone added Status: PR Modified Workflows ⚠️ PR contains changes to GitHub Actions Status: PR Safe To Test ☑️ PRs can run deployment tests Area: Diagnostic Settings 🧪 Issues / PR's related to Diagnostic Settings labels May 30, 2024

Springstone requested a review from jtracey93 May 30, 2024 10:18

jtracey93 requested changes Jun 2, 2024

View reviewed changes

docs/wiki/Whats-new.md Show resolved Hide resolved

docs/wiki/Whats-new.md Show resolved Hide resolved

microsoft-github-policy-service bot added the Needs: Author Feedback label Jun 2, 2024

Added: Manually remove policy assignments corresponding to deprecated…

09fe0f4

… policies when utilizing Portal, ARM, or Bicep.

arjenhuitema had a problem deploying to csu-rw June 3, 2024 07:27 — with GitHub Actions Error

microsoft-github-policy-service bot removed the Needs: Author Feedback label Jun 3, 2024

Adding note to remove default assignments. (#1655)

4e25b6e

Co-authored-by: Jack Tracey <[email protected]>

jtracey93 had a problem deploying to csu-rw June 3, 2024 09:58 — with GitHub Actions Error

Added scope to the table

a96bded

arjenhuitema had a problem deploying to csu-rw June 3, 2024 12:17 — with GitHub Actions Failure

jtracey93 approved these changes Jun 3, 2024

View reviewed changes

jtracey93 merged commit d60ba34 into main Jun 3, 2024
3 of 5 checks passed

jtracey93 deleted the policy-refresh-q3fy24 branch June 3, 2024 12:32

matt-FFFFFF mentioned this pull request Jun 6, 2024

feat!: ama Azure/terraform-azurerm-caf-enterprise-scale#968

Merged

5 tasks

oZakari mentioned this pull request Jun 18, 2024

Enhancement: Policy Refresh H2 FY24 and Changes for AMA Azure/ALZ-Bicep#785

Merged

10 tasks

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Policy Refresh H2 FY24 #1651

Policy Refresh H2 FY24 #1651

Springstone commented May 29, 2024 •

edited

Loading

jtracey93 left a comment

nekdima commented Jun 24, 2024

Springstone commented Jun 24, 2024

Policy Refresh H2 FY24 #1651

Policy Refresh H2 FY24 #1651

Conversation

Springstone commented May 29, 2024 • edited Loading

Overview/Summary

Testing URLs

Azure Public

As part of this Pull Request I have

jtracey93 left a comment

Choose a reason for hiding this comment

nekdima commented Jun 24, 2024

Springstone commented Jun 24, 2024

Springstone commented May 29, 2024 •

edited

Loading