Skip to content
Merged
Changes from 1 commit
Commits
Show all changes
155 commits
Select commit Hold shift + click to select a range
196bdd0
Add FSI specific policies
Springstone Mar 20, 2024
a1fdff3
Add Deny-CognitiveServices-RestrictOutboundNetworkAccess policy defin…
Springstone Mar 20, 2024
97db4cb
Add FSI specific policies
Springstone Apr 2, 2024
15610d5
Add FSI specific initiative policy set definition
Springstone Apr 2, 2024
ecdae38
Add FSI specific initiative policies for App Services
Springstone Apr 2, 2024
be7bc0d
Add aaModifyPublicNetworkAccess parameter to Deny-PublicPaaSEndpoints…
Springstone Apr 2, 2024
4032cb7
Add policy definitions for Cognitive Search and Automation
Springstone Apr 2, 2024
a449bff
Update policy definitions for Deny-PublicPaaSEndpoints and Enforce-En…
Springstone Apr 3, 2024
97d4c06
Update policy set definitions for Compute and Container Apps
Springstone Apr 3, 2024
7f35801
Add new policy set definitions for Enforce-Guardrails-CosmosDb, Enfor…
Springstone Apr 3, 2024
f2de5cd
Update policy definitions for Event Hub encryption
Springstone Apr 3, 2024
7147bb3
Update Enforce-Encryption-CMK policy set definition version and name
Springstone Apr 3, 2024
64eddf4
Add new policySetDefinitions for KeyVault guardrails
Springstone Apr 3, 2024
50b18c5
Remove metadata and update groupNames in policySetDefinitions
Springstone Apr 3, 2024
6703c5e
Add ESLZ custom initiatives
Springstone Apr 3, 2024
ec12be6
Update policy and initiative files
Springstone Apr 4, 2024
6ab4bfb
Add FSI specific policy set definitions for Kubernetes, Machine Learn…
Springstone Apr 4, 2024
f321e00
Add policy set definition for Service Bus and update policy set defin…
Springstone Apr 4, 2024
22e017d
Add policy set definitions for SQL and Storage
Springstone Apr 4, 2024
aa7da20
Add policy set definition for Enforce-Guardrails-Synapse.json
Springstone Apr 5, 2024
dd098a5
Update policy and initiative files
Springstone Apr 5, 2024
c7f60e5
Update policy set definitions for ESLZ Arm template and Enforce-Encry…
Springstone Apr 5, 2024
97999e3
Update policy set definitions for Enforce-Encryption-CMK.json, Enforc…
Springstone Apr 5, 2024
90b5f3a
Update policy set definitions for Enforce-Guardrails-CosmosDb.json, E…
Springstone Apr 5, 2024
d6bd94f
Update policy set definitions for Enforce-Guardrails-KeyVault-Sup.jso…
Springstone Apr 5, 2024
969a8be
Update ALZ Policies documentation and ESLZ Arm template
Springstone Apr 5, 2024
2791ffa
Update mdfcConfiguration.json description for resource group name
Springstone Apr 5, 2024
0d575d4
Update policy set definitions for ESLZ Arm template and Enforce-Encry…
Springstone Apr 5, 2024
684a4e1
Update policy set definitions for Enforce-Guardrails-ServiceBus.json
Springstone Apr 15, 2024
501f4f9
.
Springstone Apr 16, 2024
27b3a1c
.
Springstone Apr 16, 2024
65d2ec6
.
Springstone Apr 16, 2024
7939b30
.
Springstone Apr 16, 2024
8a53c49
.
Springstone Apr 16, 2024
3b4429b
.
Springstone Apr 16, 2024
ce6327c
.
Springstone Apr 16, 2024
1336c28
Update labels and descriptions for regulated industry policy initiatives
Springstone Apr 16, 2024
da224a5
Update labels and descriptions for regulated industry policy initiatives
Springstone Apr 16, 2024
1c4aba5
Update regulated industry and regulatory compliance initiatives assig…
Springstone Apr 16, 2024
b1edff6
Refactor policy assignments for regulated industry and regulatory com…
Springstone Apr 16, 2024
afdcbb1
Add policy assignment for API Management
Springstone Apr 16, 2024
3c0038a
Add support for enabling API Management Policy Initiatives in regulat…
Springstone Apr 16, 2024
cd95554
Update multiselect and selectAll properties in eslz-portal.json
Springstone Apr 16, 2024
51aa41f
Update labels and descriptions for regulated industry policy initiatives
Springstone Apr 16, 2024
e88ea04
Refactor policy assignments for regulated industry and regulatory com…
Springstone Apr 16, 2024
f30e319
.
Springstone Apr 16, 2024
e7ff876
Update labels and descriptions for regulated industry policy initiatives
Springstone Apr 16, 2024
6905103
.
Springstone Apr 16, 2024
bb97da3
.
Springstone Apr 16, 2024
9385efa
.
Springstone Apr 16, 2024
96deba4
Update labels and descriptions for regulated industry policy initiatives
Springstone Apr 16, 2024
bc338da
.
Springstone Apr 16, 2024
e96c18e
.
Springstone Apr 16, 2024
7cb943c
Update labels and descriptions for regulated industry policy initiatives
Springstone Apr 17, 2024
bf2a03c
Update labels and descriptions for regulated industry policy initiatives
Springstone Apr 17, 2024
8fa209f
Merge branch 'Azure:main' into FSI
Springstone Apr 17, 2024
88b69ab
Update defaultValue for delayCount to 45 in eslzArm.json
Springstone Apr 17, 2024
18ebd31
Merge branch 'FSI' of https://github.com/Springstone/Enterprise-Scale…
Springstone Apr 17, 2024
c8b4427
Update labels and descriptions for regulated industry policy initiatives
Springstone Apr 17, 2024
13f4c77
Update labels and descriptions for regulated industry policy initiatives
Springstone Apr 17, 2024
58d3ba0
Update labels and descriptions for workload specific compliance polic…
Springstone Apr 17, 2024
835db96
Update labels and descriptions for regulated industry policy initiatives
Springstone Apr 17, 2024
71e8db4
Update names and scopes for wsAPIM deployments in eslzArm.json
Springstone Apr 17, 2024
ac845ab
.
Springstone Apr 17, 2024
99d4e1a
.
Springstone Apr 17, 2024
c57d209
Update policy assignment names and variables in ENFORCE-GuardrailsAPI…
Springstone Apr 17, 2024
c60db38
Update descriptions for regulated industry policy initiatives
Springstone Apr 17, 2024
ff59bea
Update descriptions for regulated industry policy initiatives
Springstone Apr 18, 2024
ac234c9
Update policy definition group names in Enforce-Guardrails-ContainerI…
Springstone Apr 18, 2024
5396bc2
Update policy definition group names, descriptions, and labels for re…
Springstone Apr 18, 2024
586ff0a
Update eslz-portal.json to hide "resourceScope" field in Microsoft.Co…
Springstone Apr 18, 2024
2d2e147
Update eslz-portal.json to remove "visible" property for "resourceSco…
Springstone Apr 18, 2024
5ac9198
Fix typo in eventGridPublicNetworkAccess parameter name
Springstone Apr 18, 2024
8548093
Update deployment name in eslzArm.json for wsContainerInstance
Springstone Apr 18, 2024
29a9b00
Add option to enable all workload specific compliance initiatives in …
Springstone Apr 18, 2024
8c02fcc
.
Springstone Apr 18, 2024
e0e4982
.
Springstone Apr 18, 2024
cb64d20
.
Springstone Apr 18, 2024
034fdf5
.
Springstone Apr 18, 2024
0fc8768
.
Springstone Apr 18, 2024
a407eff
.
Springstone Apr 18, 2024
e734a95
Add option to enable all workload specific compliance initiatives in …
Springstone Apr 19, 2024
df4b232
Update policy assignment names for guardrails in eslzArm/managementGr…
Springstone Apr 19, 2024
7fc9b3f
Add new workload specific compliance initiatives and update existing …
Springstone Apr 22, 2024
e876277
Update ALZ Portal accelerator with new "Workload Specific Compliance"…
Springstone Apr 22, 2024
66c6615
Update ALZ Portal accelerator with new "Workload Specific Compliance"…
Springstone Apr 22, 2024
2d12ae2
Update ALZ Portal accelerator with new "Workload Specific Compliance"…
Springstone Apr 22, 2024
02fcb46
Fix ALZ Policies and Initiatives escape character issue and update De…
Springstone Apr 22, 2024
835f1dc
Auto-update Portal experience [Springstone/651f57a7]
github-actions[bot] Apr 22, 2024
71b20af
Adding dependsOn for workload policies to stagger identity creation
Springstone Apr 23, 2024
4d78387
Update ALZ Portal accelerator with new "Workload Specific Compliance"…
Springstone Apr 23, 2024
2c0a47a
Update eslzArm.json to remove wsAPIMDeploymentName from dependencies
Springstone Apr 23, 2024
a79cc46
Update policy assignment names for guardrails in eslzArm/managementGr…
Springstone Apr 24, 2024
da02a54
Update policy assignment names for guardrails in eslzArm/managementGr…
Springstone Apr 24, 2024
66a8d21
Update Enforce-Encryption-CMK.json with default values set to "Deny"
Springstone Apr 24, 2024
63c8f96
Update ALZ Portal accelerator with tooltip text change in eslz-portal…
Springstone Apr 24, 2024
23eb19d
Update policy definitions for storage account TLS and secure transfer
Springstone Apr 30, 2024
907598d
Update Whats New for custom policy for storage account TLS and secure…
Springstone Apr 30, 2024
bff97fa
Fixing policy description length
Springstone Apr 30, 2024
59691d4
Add ddosPlanResourceId to eslzArm.json
Springstone May 2, 2024
4e688df
Add ddosPlanResourceId parameter to ENFORCE-GuardrailsNetworkPolicyAs…
Springstone May 3, 2024
28efe0f
Update Audit-PublicIpAddresses-UnusedResourcesCostOptimization policy…
Springstone May 3, 2024
f9c2aca
Auto-update Portal experience [Springstone/651f57a7]
github-actions[bot] May 3, 2024
cdda534
Update visibility condition for Network and Networking services in es…
Springstone May 3, 2024
b8a201d
Merge branch 'FSI' of https://github.com/Springstone/Enterprise-Scale…
Springstone May 3, 2024
5d5f73f
Merge branch 'policy-refresh-q3fy24' of https://github.com/Azure/Ente…
Springstone May 6, 2024
5986775
Auto-update Portal experience [Springstone/79c74f4d]
github-actions[bot] May 6, 2024
a4e6c3f
Merge branch 'policy-refresh-q3fy24' of https://github.com/Azure/Ente…
Springstone May 7, 2024
14d8d20
Auto-update Portal experience [Springstone/e2264bf6]
github-actions[bot] May 7, 2024
788ac66
Merge branch 'policy-refresh-q3fy24' of https://github.com/Azure/Ente…
Springstone May 7, 2024
1c0bbee
Merge branch 'FSI' of https://github.com/Springstone/Enterprise-Scale…
Springstone May 7, 2024
091f87c
Auto-update Portal experience [Springstone/e2264bf6]
github-actions[bot] May 7, 2024
2f22f1d
Fixing a merge issue
Springstone May 7, 2024
7e2deac
Meh, another merge issue.
Springstone May 7, 2024
bee9fb7
Update .github/workflows/update-portal.yml
Springstone May 9, 2024
a643a1a
Update src/resources/Microsoft.Authorization/policyDefinitions/Audit-…
Springstone May 9, 2024
66f751a
Auto-update Portal experience [Springstone/e2264bf6]
github-actions[bot] May 9, 2024
da2c6a8
Update docs/wiki/ALZ-Policies-Extra.md
Springstone May 9, 2024
b9d6fea
Update src/resources/Microsoft.Authorization/policySetDefinitions/Enf…
Springstone May 9, 2024
e47bd94
Update src/resources/Microsoft.Authorization/policyDefinitions/Deploy…
Springstone May 9, 2024
7a88d92
Auto-update Portal experience [Springstone/e2264bf6]
github-actions[bot] May 9, 2024
a8da58f
Update src/resources/Microsoft.Authorization/policyDefinitions/Deny-S…
Springstone May 9, 2024
d195087
feat: Add new generic policy for PaaS resources private endpoint to o…
Springstone May 9, 2024
3049425
Merge branch 'FSI' of https://github.com/Springstone/Enterprise-Scale…
Springstone May 9, 2024
198d740
Auto-update Portal experience [Springstone/e2264bf6]
github-actions[bot] May 9, 2024
f708cff
Update docs/wiki/ALZ-Policies-Extra.md
Springstone May 9, 2024
a4f3f93
Update src/resources/Microsoft.Authorization/policySetDefinitions/Enf…
Springstone May 9, 2024
6bf11fd
Update src/resources/Microsoft.Authorization/policyDefinitions/Deny-E…
Springstone May 9, 2024
03c1034
Auto-update Portal experience [Springstone/e2264bf6]
github-actions[bot] May 9, 2024
5008c64
Update policy set definitions for enforcing guardrails
Springstone May 9, 2024
9d4d316
Merge branch 'FSI' of https://github.com/Springstone/Enterprise-Scale…
Springstone May 9, 2024
1d907e1
Update docs/wiki/ALZ-Policies-Extra.md
Springstone May 9, 2024
4600af3
Update src/resources/Microsoft.Authorization/policyDefinitions/Deny-L…
Springstone May 9, 2024
4317ef0
Auto-update Portal experience [Springstone/e2264bf6]
github-actions[bot] May 9, 2024
3b92d0f
Update src/resources/Microsoft.Authorization/policyDefinitions/Deny-L…
Springstone May 9, 2024
f778788
Auto-update Portal experience [Springstone/e2264bf6]
github-actions[bot] May 9, 2024
e970c1c
Update policy set definitions for enforcing guardrails
Springstone May 9, 2024
b17189b
Update docs/wiki/ALZ-Policies-Extra.md
Springstone May 9, 2024
939ca85
chore: Update ALZ-Policies-FAQ.md with deployment instructions
Springstone May 9, 2024
b0539aa
Merge branch 'FSI' of https://github.com/Springstone/Enterprise-Scale…
Springstone May 9, 2024
650d4cc
chore: Update ALZ-Policies-FAQ.md with deployment instructions
Springstone May 9, 2024
c9446eb
Update ALZ-Policies-Extra.md to fix typo in policy name
Springstone May 9, 2024
8b027fb
Fix typo in ALZ-Policies-Extra.md
Springstone May 9, 2024
76925b9
Update ALZ-Policies-Extra.md to fix typo in policy name
Springstone May 9, 2024
1eed266
Update policy set definitions for enforcing guardrails
Springstone May 9, 2024
fd4e3d0
Update policy set definitions for enforcing guardrails
Springstone May 9, 2024
e602796
Update policy set definitions for enforcing guardrails
Springstone May 10, 2024
cb43fff
Auto-update Portal experience [Springstone/e2264bf6]
github-actions[bot] May 10, 2024
34f58b7
Update policy set definitions for enforcing guardrails
Springstone May 10, 2024
c182e01
Merge branch 'FSI' of https://github.com/Springstone/Enterprise-Scale…
Springstone May 10, 2024
57e77ee
Update policy set definitions to include Enforce-EncryptTransit_20240…
Springstone May 10, 2024
c10909e
Update policy set definitions to include Enforce-EncryptTransit_20240…
Springstone May 10, 2024
579a017
Update policy set definitions to include Enforce-EncryptTransit_20240…
Springstone May 10, 2024
f23ea29
Update policy set definitions to include Enforce-EncryptTransit_20240…
Springstone May 10, 2024
d476a25
Update docs/wiki/ALZ-Policies-Extra.md
Springstone May 13, 2024
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Update docs/wiki/ALZ-Policies-Extra.md
Co-authored-by: Jack Tracey <[email protected]>
  • Loading branch information
Springstone and jtracey93 authored May 13, 2024
commit d476a25e4dcec4e43f10ae8ed0089fb0d9bcf07e
2 changes: 1 addition & 1 deletion docs/wiki/ALZ-Policies-Extra.md
Original file line number Diff line number Diff line change
Expand Up @@ -10,7 +10,7 @@ ALZ provides several additional policies that are not assigned by default but th

| Policy | Description | Notes |
|------------|-------------|-------------|
| Deny-Appgw-without-Waf | Application Gateway should be deployed with WAF enabled | Use to ensure Application Gateways are deployed with Web Application Firewall enabled |
| Deny-Appgw-Without-Waf | Application Gateway should be deployed with WAF enabled | Use to ensure Application Gateways are deployed with Web Application Firewall enabled |
| Deny-Private-Dns-Zones | Deny the creation of private DNS | For organizations that centralize core networking functions, use this policy to prevent the creation of additional Private DNS Zones under specific scopes |
| Deny-Subnet-Without-Udr | Subnets should have a User Defined Route | Should you require all network traffic be directed to an appliance for inspection, you can use this policy to ensure UDR is associated with a subnet |
| Deny-Udr-With-Specific-Nexthop | User Defined Routes with 'Next Hop Type' set to 'Internet' or 'VirtualNetworkGateway' should be denied | Refining `Deny-Subnet-Without-Udr` you can ensure non-compliant UDRs are denied (e.g., bypassing a firewall) |
Expand Down