Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Encrypt transit update #1865

Merged
merged 11 commits into from
Jan 16, 2025
Merged

Encrypt transit update #1865

Show file tree
Hide file tree
Changes from 5 commits
Commits
Show all changes
11 commits
Select commit Hold shift + click to select a range
1c83e8e
Deprecate Enforce-EncryptTransit 20240509 policy and update documenta…
cassiekays Dec 11, 2024
2dbfd79
Update Bicep generator version and template hash in custom role defin…
cassiekays Dec 11, 2024
ff0bd51
removed unwanted enforce-encrypt transit file, not the most updated v…
cassiekays Dec 11, 2024
decf07a
Add Enforce-EncryptTransit policy definition for 20241211 to initiati…
cassiekays Dec 11, 2024
f72de2a
Deprecate Enforce-EncryptTransit 20240509 policy and update descripti…
cassiekays Dec 11, 2024
c2ebc38
Update deprecation details for Enforce-EncryptTransit policies in doc…
cassiekays Dec 12, 2024
bf8174d
Remove duplicate containerAppsHttps parameter from Enforce-EncryptTra…
cassiekays Dec 12, 2024
06dea79
added description of encrypt transit update to whats new.md
cassiekays Dec 12, 2024
bae50f3
Merge branch 'policy-refresh-q2fy25' into encryptTransit_update
Springstone Jan 10, 2025
89f9c77
Minor updates
Springstone Jan 10, 2025
6ec5d32
Merge branch 'policy-refresh-q2fy25' into encryptTransit_update
Springstone Jan 16, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion docs/wiki/ALZ-Deprecated-Services.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -33,7 +33,7 @@ Policies being deprecated:
| Diagnostic Settings for MariaDB to Log Analytics Workspace <br>ID: [`Deploy-Diagnostics-MariaDB`](https://www.azadvertizer.net/azpolicyadvertizer/Deploy-Diagnostics-MariaDB.html) | Deprecating due to service retirement | Deprecating policies for MariaDB, see [`ALZ Policy FAQ & Tips`](./ALZ-Policies-FAQ) |
| Deploy SQL Database Vulnerability Assessments<br>ID: [`Deploy-Sql-vulnerabilityAssessments`](https://www.azadvertizer.net/azpolicyadvertizer/Deploy-Sql-vulnerabilityAssessments.html) | [`Deploy-Sql-vulnerabilityAssessments_20230706`](https://www.azadvertizer.net/azpolicyadvertizer/Deploy-Sql-vulnerabilityAssessments_20230706.html) | Custom policy replaced by updated custom policy providing bug fix |
| Deploy Microsoft Defender for Cloud configuration<br>ID: [`Deploy-MDFC-Config`](https://www.azadvertizer.net/azpolicyinitiativesadvertizer/Deploy-MDFC-Config.html) | [`Deploy-MDFC-Config_20240319`](https://www.azadvertizer.net/azpolicyinitiativesadvertizer/Deploy-MDFC-Config_20240319.html) | Custom initiative replaced by updated custom initiative due to breaking changes |
| Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit<br>ID: [`Enforce-EncryptTransit`](https://www.azadvertizer.net/azpolicyinitiativesadvertizer/Enforce-EncryptTransit.html) | [`Enforce-EncryptTransit_20240509`](https://www.azadvertizer.net/azpolicyinitiativesadvertizer/Enforce-EncryptTransit_20240509.html) | Custom initiative replaced by updated custom initiative due to breaking changes |
| Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit<br>ID: [`Enforce-EncryptTransit_20240509`](https://www.azadvertizer.net/azpolicyinitiativesadvertizer/Enforce-EncryptTransit.html) | [`Enforce-EncryptTransit_20241211`](https://www.azadvertizer.net/azpolicyinitiativesadvertizer/Enforce-EncryptTransit_20240509.html) | Custom initiative replaced by updated custom initiative due to breaking changes |
cassiekays marked this conversation as resolved.
Show resolved Hide resolved
| Deploy SQL Database built-in SQL security configuration<br>ID: [`Deploy-SQL-Security`](https://www.azadvertizer.net/azpolicyinitiativesadvertizer/Deploy-SQL-Security.html) | [`Deploy-SQL-Security_20240529`](https://www.azadvertizer.net/azpolicyinitiativesadvertizer/Deploy-SQL-Security_20240529.html) | Custom initiative replaced by updated custom initiative due to breaking changes |
| Configure SQL VM and Arc-enabled SQL Servers to install Microsoft Defender for SQL and AMA with a user-defined LAW<br>ID: `Deploy-MDFC-DefenderSQL-AMA` | [`de01d381-bae9-4670-8870-786f89f49e26`](https://www.azadvertizer.net/azpolicyinitiativesadvertizer/de01d381-bae9-4670-8870-786f89f49e26.html) | Custom policy replaced by built-in requires less administration overhead |
| Configure SQL Virtual Machines to automatically install Microsoft Defender for SQL<br>ID: `Deploy-MDFC-SQL-DefenderSQL` | [`ddca0ddc-4e9d-4bbb-92a1-f7c4dd7ef7ce`](https://www.azadvertizer.net/azpolicyadvertizer/ddca0ddc-4e9d-4bbb-92a1-f7c4dd7ef7ce.html) | Custom policy replaced by built-in requires less administration overhead |
Expand Down
4 changes: 2 additions & 2 deletions eslzArm/managementGroupTemplates/policyDefinitions/initiatives.json
View file
Open in desktop

Large diffs are not rendered by default.

4 changes: 2 additions & 2 deletions eslzArm/managementGroupTemplates/roleDefinitions/customRoleDefinitions.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,8 +4,8 @@
"metadata": {
"_generator": {
"name": "bicep",
"version": "0.29.47.4906",
"templateHash": "12429908550017328445"
"version": "0.31.34.60546",
"templateHash": "2651717388759682217"
}
},
"variables": {
Expand Down
10 changes: 6 additions & 4 deletions ...sources/Microsoft.Authorization/policySetDefinitions/Enforce-EncryptTransit_20240509.json
View file
Open in desktop
Springstone marked this conversation as resolved.
Show resolved Hide resolved
Original file line number Diff line number Diff line change
Expand Up @@ -5,13 +5,15 @@
"scope": null,
"properties": {
"policyType": "Custom",
"displayName": "Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit",
"description": "Choose either Deploy if not exist and append in combination with audit or Select Deny in the Policy effect. Deny polices shift left. Deploy if not exist and append enforce but can be changed, and because missing existence condition require then the combination of Audit. ",
"displayName": "[Deprecated]: Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit",
"description": "Choose either Deploy if not exist and append in combination with audit or Select Deny in the Policy effect. Deny polices shift left. Deploy if not exist and append enforce but can be changed, and because missing existence condition require then the combination of Audit. Superseded by https://www.azadvertizer.net/azpolicyinitiativesadvertizer/Enforce-EncryptTransit_20241211.html ",
"metadata": {
"version": "1.2.0",
"version": "1.2.0-deprecated",
"category": "Encryption",
"source": "https://github.com/Azure/Enterprise-Scale/",
"replacesPolicy": "Enforce-EncryptTransit",
"replacesPolicy": "Enforce-EncryptTransit",
"deprecated": true,
"supersededBy": "Enforce-EncryptTransit_20241211",
"alzCloudEnvironments": [
"AzureCloud",
"AzureChinaCloud",
Expand Down
Loading