Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Policy Refresh H2 FY24 #1651

Merged
merged 23 commits into from
Jun 3, 2024
Merged

Policy Refresh H2 FY24 #1651

merged 23 commits into from
Jun 3, 2024

Conversation

Springstone
Copy link
Member

@Springstone Springstone commented May 29, 2024 •
edited
Loading

Overview/Summary

This is the H2 FY24 Policy Refresh!

Testing URLs

Azure Public

Deploy To Azure

As part of this Pull Request I have

  • Checked for duplicate Pull Requests
  • Associated it with relevant issues, for tracking and closure.
  • Ensured my code/branch is up-to-date with the latest changes in the main branch
  • Performed testing and provided evidence.
  • Ensured contribution guidance is followed.
  • Updated relevant and associated documentation.
  • Updated the "What's New?" wiki page (located: /docs/wiki/whats-new.md)

jtracey93 and others added 17 commits March 7, 2024 10:27
@jtracey93 @github-actions
Update display name for Audit-PrivateLinkDnsZones policy (#1592)
281f03f 
Co-authored-by: github-actions <41898282+github-actions[bot]@users.noreply.github.com>
@rozkurt @github-actions
@Springstone @jtracey93
Private DNS Zones- Bug Fix1485 (#1578)
f002346 
Co-authored-by: Recep Ozkurt <recepo@microsoft.com>
Co-authored-by: github-actions <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Sacha Narinx <Springstone@users.noreply.github.com>
Co-authored-by: Jack Tracey <41163455+jtracey93@users.noreply.github.com>
@Springstone
Merge branch 'main' of https://github.com/Azure/Enterprise-Scale into…
805f537 
… policy-refresh-q3fy24
@Springstone
Portal Fixes (#1597)
9887791
@Springstone @github-actions
Trusted Launch Initiative added (#1605)
360f0a2 
Co-authored-by: github-actions <41898282+github-actions[bot]@users.noreply.github.com>
@Springstone @4pplied @github-actions
Backup initiative (#1601)
651f57a 
Co-authored-by: JamJarchitect <53943045+JamJarchitect@users.noreply.github.com>
Co-authored-by: github-actions <41898282+github-actions[bot]@users.noreply.github.com>
@rozkurt @github-actions
@Springstone @jtracey93
Fix on GH issue #1486 (#1621)
b646a5d 
Co-authored-by: Recep Ozkurt <recepo@microsoft.com>
Co-authored-by: github-actions <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Sacha Narinx <Springstone@users.noreply.github.com>
Co-authored-by: Jack Tracey <41163455+jtracey93@users.noreply.github.com>
@Springstone
Merge branch 'main' of https://github.com/Azure/Enterprise-Scale into…
79c74f4 
… policy-refresh-q3fy24
@Springstone @github-actions
Defender for Cloud provisioning cleanup - remove D4C DNS and VM Vulne…
21908c0 
…rability Assessment Provider (#1577)

Co-authored-by: github-actions <41898282+github-actions[bot]@users.noreply.github.com>
@Ravivarman13 @Springstone
@github-actions @jtracey93
New generic policy for PaaS resources private endpoint to override Pr…
e2264bf 
…ivate DNS zone. (#1618)

Co-authored-by: Sacha Narinx <Springstone@users.noreply.github.com>
Co-authored-by: github-actions <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Jack Tracey <41163455+jtracey93@users.noreply.github.com>
@Springstone @github-actions @jtracey93
New Feature: Workload Specific Compliance (#1622)
0074785 
Co-authored-by: github-actions <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Jack Tracey <41163455+jtracey93@users.noreply.github.com>
@Springstone @github-actions @jtracey93
Updating Microsoft Defender for Endpoints to use new initiative (#1639)
97022e9 
Co-authored-by: github-actions <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Jack Tracey <41163455+jtracey93@users.noreply.github.com>
@Springstone @github-actions
Diagnostic Settings v2 🎉 (#1641)
fbfba91 
Co-authored-by: github-actions <41898282+github-actions[bot]@users.noreply.github.com>
@Springstone
Hotfix: Minor assignment HotFix to address repeated deployment confli…
569c6af 
…ct (#1643)
@arjenhuitema @github-actions @Springstone
AMA Updates (#1649)
000fcd2 
Co-authored-by: github-actions <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Sacha Narinx <Springstone@users.noreply.github.com>
@Springstone @jtracey93
feat: Add evaluationDelay paramter for Deploy-Private-DNS-Generic pol…
f4576ea 
…icy (#1650)

Co-authored-by: Jack Tracey <41163455+jtracey93@users.noreply.github.com>
@Springstone
Hotfix: previously updated policy not updated in initiative (low prio…
dbbe628 
…rity) (#1648)
@Springstone Springstone requested review from a team as code owners May 29, 2024 10:01
@Springstone Springstone added this to the policy-refresh-fy24-h2 milestone May 29, 2024
@Springstone Springstone added Area: Logging & Automation 📷 Issues / PR's related to Logging & Automation Area: Policy 📝 Issues / PR's related to Policy Needs: Upstream Policy Changes 🔃 Upstream ESLZ repo policy changes required labels May 30, 2024
@Springstone Springstone added Status: PR Modified Workflows ⚠️ PR contains changes to GitHub Actions Status: PR Safe To Test ☑️ PRs can run deployment tests Area: Diagnostic Settings 🧪 Issues / PR's related to Diagnostic Settings labels May 30, 2024
jtracey93
jtracey93 requested changes Jun 2, 2024
View reviewed changes
Copy link
Collaborator

@jtracey93 jtracey93 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

2 changes please @Springstone & @arjenhuitema to the docs and then I think we are good.

I have also tested an upgrade deployment and am happy 😄 so just the docs piece and we are good to merge and release

Cc: @paulgrimley

docs/wiki/Whats-new.md Show resolved Hide resolved
docs/wiki/Whats-new.md Show resolved Hide resolved
@arjenhuitema
Added: Manually remove policy assignments corresponding to deprecated…
09fe0f4 
… policies when utilizing Portal, ARM, or Bicep.
@Springstone @jtracey93
Adding note to remove default assignments. (#1655)
4e25b6e 
Co-authored-by: Jack Tracey <41163455+jtracey93@users.noreply.github.com>
@jtracey93 jtracey93 merged commit d60ba34 into main Jun 3, 2024
3 of 5 checks passed
@jtracey93 jtracey93 deleted the policy-refresh-q3fy24 branch June 3, 2024 12:32
@matt-FFFFFF matt-FFFFFF mentioned this pull request Jun 6, 2024
Merged
5 tasks
@oZakari oZakari mentioned this pull request Jun 18, 2024
Merged
10 tasks
@nekdima
Copy link

nekdima commented Jun 24, 2024

Hey Team, could you please update Excel (ALZ Policy Assignments v2) with new policies?
https://github.com/Azure/Enterprise-Scale/wiki/ALZ-Policies

@Springstone
Copy link
Member Author

Hey Team, could you please update Excel (ALZ Policy Assignments v2) with new policies? https://github.com/Azure/Enterprise-Scale/wiki/ALZ-Policies

@nekdima please note the Excel only includes policies we assign by default. The new policies and initiatives are not enabled by default and require selecting scopes to apply at. We'll look at an additional Excel that includes all ALZ policies/initiatives regardless of assignment in a future update.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@jtracey93 jtracey93 jtracey93 approved these changes

Assignees
No one assigned
Labels
Area: Diagnostic Settings 🧪 Issues / PR's related to Diagnostic Settings Area: Logging & Automation 📷 Issues / PR's related to Logging & Automation Area: Policy 📝 Issues / PR's related to Policy Needs: Upstream Policy Changes 🔃 Upstream ESLZ repo policy changes required Status: PR Modified Workflows ⚠️ PR contains changes to GitHub Actions Status: PR Safe To Test ☑️ PRs can run deployment tests
Projects
None yet
Milestone
policy-refresh-fy24-h2
Development

Successfully merging this pull request may close these issues.
6 participants
@Springstone @nekdima @jtracey93 @arjenhuitema @rozkurt @Ravivarman13