Overview/Summary

This pull request introduces updates to the Enterprise Scale/Azure Landing Zones policies and their documentation. The most significant changes include an update to the version metadata of the Enforce-Guardrails-Network policy, and a modification to the allowed values for the modifyNsgRuleAccess parameter in the same policy.

Addresses issue #1697

Policy Refresh:

• docs/wiki/Whats-new.md: Added a section for July 2024, which includes a fix for the allowed values of modifyNsgRuleAccess in the Enforce-Guardrails-Network policy.

Policy Version Update:

• src/resources/Microsoft.Authorization/policySetDefinitions/Enforce-Guardrails-Network.json: Updated the version metadata from "1.0.0" to "1.1.0".

Policy Parameter Modification:

• src/resources/Microsoft.Authorization/policySetDefinitions/Enforce-Guardrails-Network.json: Changed the allowed values for the modifyNsgRuleAccess parameter from "Audit", "Deny", "Disabled" to "Allow", "Deny".

Tested, and confirm it updates initiative and assignment in place.

Addresses #1697

Testing URLs

Azure Public

As part of this Pull Request I have

• Checked for duplicate Pull Requests
• Associated it with relevant issues, for tracking and closure.
• Ensured my code/branch is up-to-date with the latest changes in the main branch
• Performed testing and provided evidence.
• Ensured contribution guidance is followed.
• Updated relevant and associated documentation.
• Updated the "What's New?" wiki page (located: /docs/wiki/whats-new.md)