- Update links with Azure org #800 - Update codeowners and dependabot
This commit is contained in:
Bernie White
GitHub
Родитель
65255bbd0b
Коммит
8dfcffc2ed
|
|
@ -213,7 +213,7 @@ stages:
|
|||
action: edit
|
||||
tag: '$(Build.SourceBranchName)'
|
||||
releaseNotesSource: inline
|
||||
releaseNotesInline: 'See [change log](https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/CHANGELOG.md)'
|
||||
releaseNotesInline: 'See [change log](https://github.com/Azure/PSRule.Rules.Azure/blob/main/CHANGELOG.md)'
|
||||
assetUploadMode: replace
|
||||
addChangeLog: false
|
||||
isPreRelease: $(isPreRelease)
|
||||
|
|
|
|||
|
|
@ -1,2 +1,2 @@
|
|||
# https://help.github.com/articles/about-codeowners/
|
||||
* @microsoft/psrule-rules-azure
|
||||
* @azure/psrule-rules-azure
|
||||
|
|
|
|||
|
|
@ -8,4 +8,4 @@ We use Issues as an issue tracker; for help, discussion, and support questions,
|
|||
|
||||
Thanks! 😁.
|
||||
|
||||
- https://github.com/microsoft/PSRule.Rules.Azure/discussions
|
||||
- https://github.com/Azure/PSRule.Rules.Azure/discussions
|
||||
|
|
|
|||
|
|
@ -12,8 +12,8 @@
|
|||
- [ ] Unit tests created/ updated
|
||||
- [ ] Rule documentation created/ updated
|
||||
- [ ] Link to a filed issue
|
||||
- [ ] [Change log](https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/CHANGELOG-v1.md) has been updated with change under unreleased section
|
||||
- [ ] [Change log](https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/CHANGELOG-v1.md) has been updated with change under unreleased section
|
||||
- **Other code changes**
|
||||
- [ ] Unit tests created/ updated
|
||||
- [ ] Link to a filed issue
|
||||
- [ ] [Change log](https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/CHANGELOG-v1.md) has been updated with change under unreleased section
|
||||
- [ ] [Change log](https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/CHANGELOG-v1.md) has been updated with change under unreleased section
|
||||
|
|
|
|||
|
|
@ -16,7 +16,7 @@ updates:
|
|||
labels:
|
||||
- 'dependencies'
|
||||
reviewers:
|
||||
- 'microsoft/psrule-rules-azure'
|
||||
- 'azure/psrule-rules-azure'
|
||||
ignore:
|
||||
# Ignore upgrades to PS 7.1 for tool chain components at this time
|
||||
# Testing against PS 7.1 is already completed
|
||||
|
|
@ -30,4 +30,14 @@ updates:
|
|||
labels:
|
||||
- 'ci-quality'
|
||||
reviewers:
|
||||
- 'microsoft/psrule-rules-azure'
|
||||
- 'azure/psrule-rules-azure'
|
||||
|
||||
# Maintain dependencies for Python
|
||||
- package-ecosystem: 'pip'
|
||||
directory: '/'
|
||||
schedule:
|
||||
interval: 'daily'
|
||||
labels:
|
||||
- 'ci-quality'
|
||||
reviewers:
|
||||
- 'azure/psrule-rules-azure'
|
||||
|
|
|
|||
|
|
@ -167,4 +167,4 @@ Thank you for taking the time to contribute.
|
|||
[github-pr-create]: https://help.github.com/en/github/collaborating-with-issues-and-pull-requests/creating-a-pull-request-from-a-fork
|
||||
[build]: docs/install-instructions.md#building-from-source
|
||||
[vscode]: https://code.visualstudio.com/
|
||||
[issues]: https://github.com/Microsoft/PSRule.Rules.Azure/issues
|
||||
[issues]: https://github.com/Azure/PSRule.Rules.Azure/issues
|
||||
|
|
|
|||
|
|
@ -380,8 +380,8 @@ or contact [opencode@microsoft.com](mailto:opencode@microsoft.com) with any addi
|
|||
|
||||
This project is [licensed under the MIT License](LICENSE).
|
||||
|
||||
[issue]: https://github.com/microsoft/PSRule.Rules.Azure/issues
|
||||
[discussion]: https://github.com/microsoft/PSRule.Rules.Azure/discussions
|
||||
[issue]: https://github.com/Azure/PSRule.Rules.Azure/issues
|
||||
[discussion]: https://github.com/Azure/PSRule.Rules.Azure/discussions
|
||||
[install]: docs/install-instructions.md
|
||||
[ci-badge]: https://dev.azure.com/bewhite/PSRule.Rules.Azure/_apis/build/status/PSRule.Rules.Azure-CI?branchName=main
|
||||
[module]: https://www.powershellgallery.com/packages/PSRule.Rules.Azure
|
||||
|
|
|
|||
|
|
@ -19,7 +19,7 @@ Document 'RuleHelp' {
|
|||
}
|
||||
|
||||
if (!$annotations.Contains('online version')) {
|
||||
$annotations['online version'] = "https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/rules/en/$($rule.Name).md";
|
||||
$annotations['online version'] = "https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/rules/en/$($rule.Name).md";
|
||||
}
|
||||
|
||||
Metadata $annotations;
|
||||
|
|
|
|||
Разница между файлами не показана из-за своего большого размера
Загрузить разницу
|
|
@ -12,9 +12,9 @@ See [troubleshooting guide] for a workaround to this issue.
|
|||
What's changed since v1.4.0:
|
||||
|
||||
- Bug fixes:
|
||||
- Fixed boolean string conversion case. [#793](https://github.com/Microsoft/PSRule.Rules.Azure/issues/793)
|
||||
- Fixed case sensitive property matching. [#794](https://github.com/Microsoft/PSRule.Rules.Azure/issues/794)
|
||||
- Fixed automatic expansion of template parameter files. [#796](https://github.com/Microsoft/PSRule.Rules.Azure/issues/796)
|
||||
- Fixed boolean string conversion case. [#793](https://github.com/Azure/PSRule.Rules.Azure/issues/793)
|
||||
- Fixed case sensitive property matching. [#794](https://github.com/Azure/PSRule.Rules.Azure/issues/794)
|
||||
- Fixed automatic expansion of template parameter files. [#796](https://github.com/Azure/PSRule.Rules.Azure/issues/796)
|
||||
- Template parameter files are not automatically expanded by default.
|
||||
- To enable this, set the `AZURE_PARAMETER_FILE_EXPANSION` configuration option.
|
||||
|
||||
|
|
@ -23,38 +23,38 @@ What's changed since v1.4.0:
|
|||
What's changed since v1.3.2:
|
||||
|
||||
- New features:
|
||||
- Automatically expand template from parameter files for analysis. [#772](https://github.com/Microsoft/PSRule.Rules.Azure/issues/772)
|
||||
- Automatically expand template from parameter files for analysis. [#772](https://github.com/Azure/PSRule.Rules.Azure/issues/772)
|
||||
- Previously templates needed to be exported with `Export-AzRuleTemplateData`.
|
||||
- To export template data automatically use PSRule cmdlets with `-Format File`.
|
||||
- New rules:
|
||||
- Cognitive Search:
|
||||
- Check search services meet index SLA replica requirement. [#761](https://github.com/Microsoft/PSRule.Rules.Azure/issues/761)
|
||||
- Check search services meet query SLA replica requirement. [#762](https://github.com/Microsoft/PSRule.Rules.Azure/issues/762)
|
||||
- Check search services meet naming requirements. [#763](https://github.com/Microsoft/PSRule.Rules.Azure/issues/763)
|
||||
- Check search services use a minimum SKU. [#764](https://github.com/Microsoft/PSRule.Rules.Azure/issues/764)
|
||||
- Check search services use managed identities. [#765](https://github.com/Microsoft/PSRule.Rules.Azure/issues/765)
|
||||
- Check search services meet index SLA replica requirement. [#761](https://github.com/Azure/PSRule.Rules.Azure/issues/761)
|
||||
- Check search services meet query SLA replica requirement. [#762](https://github.com/Azure/PSRule.Rules.Azure/issues/762)
|
||||
- Check search services meet naming requirements. [#763](https://github.com/Azure/PSRule.Rules.Azure/issues/763)
|
||||
- Check search services use a minimum SKU. [#764](https://github.com/Azure/PSRule.Rules.Azure/issues/764)
|
||||
- Check search services use managed identities. [#765](https://github.com/Azure/PSRule.Rules.Azure/issues/765)
|
||||
- Azure Kubernetes Service:
|
||||
- Check clusters use AKS-managed Azure AD integration. [#436](https://github.com/microsoft/PSRule.Rules.Azure/issues/436)
|
||||
- Check clusters have local account disabled (preview). [#786](https://github.com/microsoft/PSRule.Rules.Azure/issues/786)
|
||||
- Check clusters have an auto-upgrade channel set (preview). [#787](https://github.com/microsoft/PSRule.Rules.Azure/issues/787)
|
||||
- Check clusters limit access network access to the API server. [#788](https://github.com/microsoft/PSRule.Rules.Azure/issues/788)
|
||||
- Check clusters used Azure RBAC for Kubernetes authorization. [#789](https://github.com/microsoft/PSRule.Rules.Azure/issues/789)
|
||||
- Check clusters use AKS-managed Azure AD integration. [#436](https://github.com/Azure/PSRule.Rules.Azure/issues/436)
|
||||
- Check clusters have local account disabled (preview). [#786](https://github.com/Azure/PSRule.Rules.Azure/issues/786)
|
||||
- Check clusters have an auto-upgrade channel set (preview). [#787](https://github.com/Azure/PSRule.Rules.Azure/issues/787)
|
||||
- Check clusters limit access network access to the API server. [#788](https://github.com/Azure/PSRule.Rules.Azure/issues/788)
|
||||
- Check clusters used Azure RBAC for Kubernetes authorization. [#789](https://github.com/Azure/PSRule.Rules.Azure/issues/789)
|
||||
- Updated rules
|
||||
- Azure Kubernetes Service:
|
||||
- Updated `Azure.AKS.Version` to 1.20.5. [#767](https://github.com/Microsoft/PSRule.Rules.Azure/issues/767)
|
||||
- Updated `Azure.AKS.Version` to 1.20.5. [#767](https://github.com/Azure/PSRule.Rules.Azure/issues/767)
|
||||
- General improvements:
|
||||
- Automatically nest template sub-resources for analysis. [#746](https://github.com/Microsoft/PSRule.Rules.Azure/issues/746)
|
||||
- Automatically nest template sub-resources for analysis. [#746](https://github.com/Azure/PSRule.Rules.Azure/issues/746)
|
||||
- Sub-resources such as diagnostic logs or configurations are automatically nested.
|
||||
- Automatic nesting a resource requires:
|
||||
- The parent resource is defined in the same template.
|
||||
- The sub-resource depends on the parent resource.
|
||||
- Added support for source location references to template files. [#781](https://github.com/Microsoft/PSRule.Rules.Azure/issues/781)
|
||||
- Added support for source location references to template files. [#781](https://github.com/Azure/PSRule.Rules.Azure/issues/781)
|
||||
- Output includes source location to resources exported from a templates.
|
||||
- Bug fixes:
|
||||
- Fixed string index parsing in expressions with whitespace. [#775](https://github.com/Microsoft/PSRule.Rules.Azure/issues/775)
|
||||
- Fixed base for DateTimeAdd is not a valid string. [#777](https://github.com/Microsoft/PSRule.Rules.Azure/issues/777)
|
||||
- Fixed string index parsing in expressions with whitespace. [#775](https://github.com/Azure/PSRule.Rules.Azure/issues/775)
|
||||
- Fixed base for DateTimeAdd is not a valid string. [#777](https://github.com/Azure/PSRule.Rules.Azure/issues/777)
|
||||
- Engineering:
|
||||
- Added source link to project. [#783](https://github.com/microsoft/PSRule.Rules.Azure/issues/783)
|
||||
- Added source link to project. [#783](https://github.com/Azure/PSRule.Rules.Azure/issues/783)
|
||||
|
||||
What's changed since pre-release v1.4.0-B2105057:
|
||||
|
||||
|
|
@ -66,23 +66,23 @@ What's changed since pre-release v1.4.0-B2105050:
|
|||
|
||||
- New rules:
|
||||
- Azure Kubernetes Service:
|
||||
- Check clusters use AKS-managed Azure AD integration. [#436](https://github.com/microsoft/PSRule.Rules.Azure/issues/436)
|
||||
- Check clusters have local account disabled (preview). [#786](https://github.com/microsoft/PSRule.Rules.Azure/issues/786)
|
||||
- Check clusters have an auto-upgrade channel set (preview). [#787](https://github.com/microsoft/PSRule.Rules.Azure/issues/787)
|
||||
- Check clusters limit access network access to the API server. [#788](https://github.com/microsoft/PSRule.Rules.Azure/issues/788)
|
||||
- Check clusters used Azure RBAC for Kubernetes authorization. [#789](https://github.com/microsoft/PSRule.Rules.Azure/issues/789)
|
||||
- Check clusters use AKS-managed Azure AD integration. [#436](https://github.com/Azure/PSRule.Rules.Azure/issues/436)
|
||||
- Check clusters have local account disabled (preview). [#786](https://github.com/Azure/PSRule.Rules.Azure/issues/786)
|
||||
- Check clusters have an auto-upgrade channel set (preview). [#787](https://github.com/Azure/PSRule.Rules.Azure/issues/787)
|
||||
- Check clusters limit access network access to the API server. [#788](https://github.com/Azure/PSRule.Rules.Azure/issues/788)
|
||||
- Check clusters used Azure RBAC for Kubernetes authorization. [#789](https://github.com/Azure/PSRule.Rules.Azure/issues/789)
|
||||
- Updated rules
|
||||
- Azure Kubernetes Service:
|
||||
- Updated `Azure.AKS.Version` to 1.20.5. [#767](https://github.com/Microsoft/PSRule.Rules.Azure/issues/767)
|
||||
- Updated `Azure.AKS.Version` to 1.20.5. [#767](https://github.com/Azure/PSRule.Rules.Azure/issues/767)
|
||||
- Engineering:
|
||||
- Added source link to project. [#783](https://github.com/microsoft/PSRule.Rules.Azure/issues/783)
|
||||
- Added source link to project. [#783](https://github.com/Azure/PSRule.Rules.Azure/issues/783)
|
||||
|
||||
## v1.4.0-B2105050 (pre-release)
|
||||
|
||||
What's changed since pre-release v1.4.0-B2105044:
|
||||
|
||||
- General improvements:
|
||||
- Added support for source location references to template files. [#781](https://github.com/Microsoft/PSRule.Rules.Azure/issues/781)
|
||||
- Added support for source location references to template files. [#781](https://github.com/Azure/PSRule.Rules.Azure/issues/781)
|
||||
- Output includes source location to resources exported from a templates.
|
||||
|
||||
## v1.4.0-B2105044 (pre-release)
|
||||
|
|
@ -90,12 +90,12 @@ What's changed since pre-release v1.4.0-B2105044:
|
|||
What's changed since pre-release v1.4.0-B2105027:
|
||||
|
||||
- New features:
|
||||
- Automatically expand template from parameter files for analysis. [#772](https://github.com/Microsoft/PSRule.Rules.Azure/issues/772)
|
||||
- Automatically expand template from parameter files for analysis. [#772](https://github.com/Azure/PSRule.Rules.Azure/issues/772)
|
||||
- Previously templates needed to be exported with `Export-AzRuleTemplateData`.
|
||||
- To export template data automatically use PSRule cmdlets with `-Format File`.
|
||||
- Bug fixes:
|
||||
- Fixed string index parsing in expressions with whitespace. [#775](https://github.com/Microsoft/PSRule.Rules.Azure/issues/775)
|
||||
- Fixed base for DateTimeAdd is not a valid string. [#777](https://github.com/Microsoft/PSRule.Rules.Azure/issues/777)
|
||||
- Fixed string index parsing in expressions with whitespace. [#775](https://github.com/Azure/PSRule.Rules.Azure/issues/775)
|
||||
- Fixed base for DateTimeAdd is not a valid string. [#777](https://github.com/Azure/PSRule.Rules.Azure/issues/777)
|
||||
|
||||
## v1.4.0-B2105027 (pre-release)
|
||||
|
||||
|
|
@ -103,18 +103,18 @@ What's changed since pre-release v1.4.0-B2105020:
|
|||
|
||||
- New rules:
|
||||
- Cognitive Search:
|
||||
- Check search services meet index SLA replica requirement. [#761](https://github.com/Microsoft/PSRule.Rules.Azure/issues/761)
|
||||
- Check search services meet query SLA replica requirement. [#762](https://github.com/Microsoft/PSRule.Rules.Azure/issues/762)
|
||||
- Check search services meet naming requirements. [#763](https://github.com/Microsoft/PSRule.Rules.Azure/issues/763)
|
||||
- Check search services use a minimum SKU. [#764](https://github.com/Microsoft/PSRule.Rules.Azure/issues/764)
|
||||
- Check search services use managed identities. [#765](https://github.com/Microsoft/PSRule.Rules.Azure/issues/765)
|
||||
- Check search services meet index SLA replica requirement. [#761](https://github.com/Azure/PSRule.Rules.Azure/issues/761)
|
||||
- Check search services meet query SLA replica requirement. [#762](https://github.com/Azure/PSRule.Rules.Azure/issues/762)
|
||||
- Check search services meet naming requirements. [#763](https://github.com/Azure/PSRule.Rules.Azure/issues/763)
|
||||
- Check search services use a minimum SKU. [#764](https://github.com/Azure/PSRule.Rules.Azure/issues/764)
|
||||
- Check search services use managed identities. [#765](https://github.com/Azure/PSRule.Rules.Azure/issues/765)
|
||||
|
||||
## v1.4.0-B2105020 (pre-release)
|
||||
|
||||
What's changed since v1.3.2:
|
||||
|
||||
- General improvements:
|
||||
- Automatically nest template sub-resources for analysis. [#746](https://github.com/Microsoft/PSRule.Rules.Azure/issues/746)
|
||||
- Automatically nest template sub-resources for analysis. [#746](https://github.com/Azure/PSRule.Rules.Azure/issues/746)
|
||||
- Sub-resources such as diagnostic logs or configurations are automatically nested.
|
||||
- Automatic nesting a resource requires:
|
||||
- The parent resource is defined in the same template.
|
||||
|
|
@ -125,15 +125,15 @@ What's changed since v1.3.2:
|
|||
What's changed since v1.3.1:
|
||||
|
||||
- Bug fixes:
|
||||
- Fixed rule reason reported the parameter inputObject is null. [#753](https://github.com/Microsoft/PSRule.Rules.Azure/issues/753)
|
||||
- Fixed rule reason reported the parameter inputObject is null. [#753](https://github.com/Azure/PSRule.Rules.Azure/issues/753)
|
||||
|
||||
## v1.3.1
|
||||
|
||||
What's changed since v1.3.0:
|
||||
|
||||
- Engineering:
|
||||
- Bump PSRule dependency to v1.3.0. [#749](https://github.com/Microsoft/PSRule.Rules.Azure/issues/749)
|
||||
- Bump YamlDotNet dependency to v11.1.1. [#742](https://github.com/Microsoft/PSRule.Rules.Azure/issues/742)
|
||||
- Bump PSRule dependency to v1.3.0. [#749](https://github.com/Azure/PSRule.Rules.Azure/issues/749)
|
||||
- Bump YamlDotNet dependency to v11.1.1. [#742](https://github.com/Azure/PSRule.Rules.Azure/issues/742)
|
||||
|
||||
## v1.3.0
|
||||
|
||||
|
|
@ -141,25 +141,25 @@ What's changed since v1.2.1:
|
|||
|
||||
- New rules:
|
||||
- Policy:
|
||||
- Check policy assignment display name and description are set. [#725](https://github.com/microsoft/PSRule.Rules.Azure/issues/725)
|
||||
- Check policy assignment assigned by metadata is set. [#726](https://github.com/microsoft/PSRule.Rules.Azure/issues/726)
|
||||
- Check policy exemption display name and description are set. [#723](https://github.com/microsoft/PSRule.Rules.Azure/issues/723)
|
||||
- Check policy waiver exemptions have an expiry date set. [#724](https://github.com/microsoft/PSRule.Rules.Azure/issues/724)
|
||||
- Check policy assignment display name and description are set. [#725](https://github.com/Azure/PSRule.Rules.Azure/issues/725)
|
||||
- Check policy assignment assigned by metadata is set. [#726](https://github.com/Azure/PSRule.Rules.Azure/issues/726)
|
||||
- Check policy exemption display name and description are set. [#723](https://github.com/Azure/PSRule.Rules.Azure/issues/723)
|
||||
- Check policy waiver exemptions have an expiry date set. [#724](https://github.com/Azure/PSRule.Rules.Azure/issues/724)
|
||||
- Removed rules:
|
||||
- Storage:
|
||||
- Remove `Azure.Storage.UseEncryption` as Storage Service Encryption (SSE) is always on. [#630](https://github.com/Microsoft/PSRule.Rules.Azure/issues/630)
|
||||
- Remove `Azure.Storage.UseEncryption` as Storage Service Encryption (SSE) is always on. [#630](https://github.com/Azure/PSRule.Rules.Azure/issues/630)
|
||||
- SSE is on by default and can not be disabled.
|
||||
- General improvements:
|
||||
- Additional metadata added in parameter files is passed through with `Get-AzRuleTemplateLink`. [#706](https://github.com/Microsoft/PSRule.Rules.Azure/issues/706)
|
||||
- Improved binding support for File inputs. [#480](https://github.com/microsoft/PSRule.Rules.Azure/issues/480)
|
||||
- Additional metadata added in parameter files is passed through with `Get-AzRuleTemplateLink`. [#706](https://github.com/Azure/PSRule.Rules.Azure/issues/706)
|
||||
- Improved binding support for File inputs. [#480](https://github.com/Azure/PSRule.Rules.Azure/issues/480)
|
||||
- Template and parameter file names now return a relative path instead of full path.
|
||||
- Added API version for each module resource. [#729](https://github.com/microsoft/PSRule.Rules.Azure/issues/729)
|
||||
- Added API version for each module resource. [#729](https://github.com/Azure/PSRule.Rules.Azure/issues/729)
|
||||
- Engineering:
|
||||
- Clean up depreciated warning message for configuration option `azureAllowedRegions`. [#737](https://github.com/microsoft/PSRule.Rules.Azure/issues/737)
|
||||
- Clean up depreciated warning message for configuration option `minAKSVersion`. [#738](https://github.com/microsoft/PSRule.Rules.Azure/issues/738)
|
||||
- Bump PSRule dependency to v1.2.0. [#713](https://github.com/Microsoft/PSRule.Rules.Azure/issues/713)
|
||||
- Clean up depreciated warning message for configuration option `azureAllowedRegions`. [#737](https://github.com/Azure/PSRule.Rules.Azure/issues/737)
|
||||
- Clean up depreciated warning message for configuration option `minAKSVersion`. [#738](https://github.com/Azure/PSRule.Rules.Azure/issues/738)
|
||||
- Bump PSRule dependency to v1.2.0. [#713](https://github.com/Azure/PSRule.Rules.Azure/issues/713)
|
||||
- Bug fixes:
|
||||
- Fixed could not load file or assembly YamlDotNet. [#741](https://github.com/microsoft/PSRule.Rules.Azure/issues/741)
|
||||
- Fixed could not load file or assembly YamlDotNet. [#741](https://github.com/Azure/PSRule.Rules.Azure/issues/741)
|
||||
- This fix pins the PSRule version to v1.2.0 until the next stable release of PSRule for Azure.
|
||||
|
||||
What's changed since pre-release v1.3.0-B2104040:
|
||||
|
|
@ -171,7 +171,7 @@ What's changed since pre-release v1.3.0-B2104040:
|
|||
What's changed since pre-release v1.3.0-B2104034:
|
||||
|
||||
- Bug fixes:
|
||||
- Fixed could not load file or assembly YamlDotNet. [#741](https://github.com/microsoft/PSRule.Rules.Azure/issues/741)
|
||||
- Fixed could not load file or assembly YamlDotNet. [#741](https://github.com/Azure/PSRule.Rules.Azure/issues/741)
|
||||
- This fix pins the PSRule version to v1.2.0 until the next stable release of PSRule for Azure.
|
||||
|
||||
## v1.3.0-B2104034 (pre-release)
|
||||
|
|
@ -180,31 +180,31 @@ What's changed since pre-release v1.3.0-B2104023:
|
|||
|
||||
- New rules:
|
||||
- Policy:
|
||||
- Check policy assignment display name and description are set. [#725](https://github.com/microsoft/PSRule.Rules.Azure/issues/725)
|
||||
- Check policy assignment assigned by metadata is set. [#726](https://github.com/microsoft/PSRule.Rules.Azure/issues/726)
|
||||
- Check policy exemption display name and description are set. [#723](https://github.com/microsoft/PSRule.Rules.Azure/issues/723)
|
||||
- Check policy waiver exemptions have an expiry date set. [#724](https://github.com/microsoft/PSRule.Rules.Azure/issues/724)
|
||||
- Check policy assignment display name and description are set. [#725](https://github.com/Azure/PSRule.Rules.Azure/issues/725)
|
||||
- Check policy assignment assigned by metadata is set. [#726](https://github.com/Azure/PSRule.Rules.Azure/issues/726)
|
||||
- Check policy exemption display name and description are set. [#723](https://github.com/Azure/PSRule.Rules.Azure/issues/723)
|
||||
- Check policy waiver exemptions have an expiry date set. [#724](https://github.com/Azure/PSRule.Rules.Azure/issues/724)
|
||||
- Engineering:
|
||||
- Clean up depreciated warning message for configuration option `azureAllowedRegions`. [#737](https://github.com/microsoft/PSRule.Rules.Azure/issues/737)
|
||||
- Clean up depreciated warning message for configuration option `minAKSVersion`. [#738](https://github.com/microsoft/PSRule.Rules.Azure/issues/738)
|
||||
- Clean up depreciated warning message for configuration option `azureAllowedRegions`. [#737](https://github.com/Azure/PSRule.Rules.Azure/issues/737)
|
||||
- Clean up depreciated warning message for configuration option `minAKSVersion`. [#738](https://github.com/Azure/PSRule.Rules.Azure/issues/738)
|
||||
|
||||
## v1.3.0-B2104023 (pre-release)
|
||||
|
||||
What's changed since pre-release v1.3.0-B2104013:
|
||||
|
||||
- General improvements:
|
||||
- Improved binding support for File inputs. [#480](https://github.com/microsoft/PSRule.Rules.Azure/issues/480)
|
||||
- Improved binding support for File inputs. [#480](https://github.com/Azure/PSRule.Rules.Azure/issues/480)
|
||||
- Template and parameter file names now return a relative path instead of full path.
|
||||
- Added API version for each module resource. [#729](https://github.com/microsoft/PSRule.Rules.Azure/issues/729)
|
||||
- Added API version for each module resource. [#729](https://github.com/Azure/PSRule.Rules.Azure/issues/729)
|
||||
|
||||
## v1.3.0-B2104013 (pre-release)
|
||||
|
||||
What's changed since pre-release v1.3.0-B2103007:
|
||||
|
||||
- Engineering:
|
||||
- Bump PSRule dependency to v1.2.0. [#713](https://github.com/Microsoft/PSRule.Rules.Azure/issues/713)
|
||||
- Bump PSRule dependency to v1.2.0. [#713](https://github.com/Azure/PSRule.Rules.Azure/issues/713)
|
||||
- Bug fixes:
|
||||
- Fixed export not expanding nested deployments. [#715](https://github.com/Microsoft/PSRule.Rules.Azure/issues/715)
|
||||
- Fixed export not expanding nested deployments. [#715](https://github.com/Azure/PSRule.Rules.Azure/issues/715)
|
||||
|
||||
## v1.3.0-B2103007 (pre-release)
|
||||
|
||||
|
|
@ -212,36 +212,36 @@ What's changed since v1.2.0:
|
|||
|
||||
- Removed rules:
|
||||
- Storage:
|
||||
- Remove `Azure.Storage.UseEncryption` as Storage Service Encryption (SSE) is always on. [#630](https://github.com/Microsoft/PSRule.Rules.Azure/issues/630)
|
||||
- Remove `Azure.Storage.UseEncryption` as Storage Service Encryption (SSE) is always on. [#630](https://github.com/Azure/PSRule.Rules.Azure/issues/630)
|
||||
- SSE is on by default and can not be disabled.
|
||||
- General improvements:
|
||||
- Additional metadata added in parameter files is passed through with `Get-AzRuleTemplateLink`. [#706](https://github.com/Microsoft/PSRule.Rules.Azure/issues/706)
|
||||
- Additional metadata added in parameter files is passed through with `Get-AzRuleTemplateLink`. [#706](https://github.com/Azure/PSRule.Rules.Azure/issues/706)
|
||||
|
||||
## v1.2.1
|
||||
|
||||
What's changed since v1.2.0:
|
||||
|
||||
- Bug fixes:
|
||||
- Fixed export not expanding nested deployments. [#715](https://github.com/Microsoft/PSRule.Rules.Azure/issues/715)
|
||||
- Fixed export not expanding nested deployments. [#715](https://github.com/Azure/PSRule.Rules.Azure/issues/715)
|
||||
|
||||
## v1.2.0
|
||||
|
||||
What's changed since v1.1.4:
|
||||
|
||||
- New features:
|
||||
- Added `Azure.GA_2021_03` baseline. [#673](https://github.com/Microsoft/PSRule.Rules.Azure/issues/673)
|
||||
- Added `Azure.GA_2021_03` baseline. [#673](https://github.com/Azure/PSRule.Rules.Azure/issues/673)
|
||||
- Includes rules released before or during March 2021 for Azure GA features.
|
||||
- Marked baseline `Azure.GA_2020_12` as obsolete.
|
||||
- New rules:
|
||||
- Key Vault:
|
||||
- Check vaults, keys, and secrets meet name requirements. [#646](https://github.com/microsoft/PSRule.Rules.Azure/issues/646)
|
||||
- Check vaults, keys, and secrets meet name requirements. [#646](https://github.com/Azure/PSRule.Rules.Azure/issues/646)
|
||||
- Updated rules:
|
||||
- Azure Kubernetes Service:
|
||||
- Updated `Azure.AKS.Version` to 1.19.7. [#696](https://github.com/Microsoft/PSRule.Rules.Azure/issues/696)
|
||||
- Updated `Azure.AKS.Version` to 1.19.7. [#696](https://github.com/Azure/PSRule.Rules.Azure/issues/696)
|
||||
- General improvements:
|
||||
- Added support for user defined functions in templates. [#682](https://github.com/microsoft/PSRule.Rules.Azure/issues/682)
|
||||
- Added support for user defined functions in templates. [#682](https://github.com/Azure/PSRule.Rules.Azure/issues/682)
|
||||
- Engineering:
|
||||
- Bump PSRule dependency to v1.1.0. [#692](https://github.com/microsoft/PSRule.Rules.Azure/issues/692)
|
||||
- Bump PSRule dependency to v1.1.0. [#692](https://github.com/Azure/PSRule.Rules.Azure/issues/692)
|
||||
|
||||
What's changed since pre-release v1.2.0-B2103044:
|
||||
|
||||
|
|
@ -252,12 +252,12 @@ What's changed since pre-release v1.2.0-B2103044:
|
|||
What's changed since pre-release v1.2.0-B2103032:
|
||||
|
||||
- New features:
|
||||
- Added `Azure.GA_2021_03` baseline. [#673](https://github.com/Microsoft/PSRule.Rules.Azure/issues/673)
|
||||
- Added `Azure.GA_2021_03` baseline. [#673](https://github.com/Azure/PSRule.Rules.Azure/issues/673)
|
||||
- Includes rules released before or during March 2021 for Azure GA features.
|
||||
- Marked baseline `Azure.GA_2020_12` as obsolete.
|
||||
- Updated rules:
|
||||
- Azure Kubernetes Service:
|
||||
- Updated `Azure.AKS.Version` to 1.19.7. [#696](https://github.com/Microsoft/PSRule.Rules.Azure/issues/696)
|
||||
- Updated `Azure.AKS.Version` to 1.19.7. [#696](https://github.com/Azure/PSRule.Rules.Azure/issues/696)
|
||||
|
||||
## v1.2.0-B2103032 (pre-release)
|
||||
|
||||
|
|
@ -265,79 +265,79 @@ What's changed since pre-release v1.2.0-B2103024:
|
|||
|
||||
- New rules:
|
||||
- Key Vault:
|
||||
- Check vaults, keys, and secrets meet name requirements. [#646](https://github.com/microsoft/PSRule.Rules.Azure/issues/646)
|
||||
- Check vaults, keys, and secrets meet name requirements. [#646](https://github.com/Azure/PSRule.Rules.Azure/issues/646)
|
||||
- Engineering:
|
||||
- Bump PSRule dependency to v1.1.0. [#692](https://github.com/microsoft/PSRule.Rules.Azure/issues/692)
|
||||
- Bump PSRule dependency to v1.1.0. [#692](https://github.com/Azure/PSRule.Rules.Azure/issues/692)
|
||||
|
||||
## v1.2.0-B2103024 (pre-release)
|
||||
|
||||
What's changed since v1.1.4:
|
||||
|
||||
- General improvements:
|
||||
- Added support for user defined functions in templates. [#682](https://github.com/microsoft/PSRule.Rules.Azure/issues/682)
|
||||
- Added support for user defined functions in templates. [#682](https://github.com/Azure/PSRule.Rules.Azure/issues/682)
|
||||
|
||||
## v1.1.4
|
||||
|
||||
What's changed since v1.1.3:
|
||||
|
||||
- Bug fixes:
|
||||
- Fixed handling of literal index with copyIndex function. [#686](https://github.com/microsoft/PSRule.Rules.Azure/issues/686)
|
||||
- Fixed handling of inner scoped nested deployments. [#687](https://github.com/microsoft/PSRule.Rules.Azure/issues/687)
|
||||
- Fixed handling of literal index with copyIndex function. [#686](https://github.com/Azure/PSRule.Rules.Azure/issues/686)
|
||||
- Fixed handling of inner scoped nested deployments. [#687](https://github.com/Azure/PSRule.Rules.Azure/issues/687)
|
||||
|
||||
## v1.1.3
|
||||
|
||||
What's changed since v1.1.2:
|
||||
|
||||
- Bug fixes:
|
||||
- Fixed parsing of property names for functions across multiple lines. [#683](https://github.com/microsoft/PSRule.Rules.Azure/issues/683)
|
||||
- Fixed parsing of property names for functions across multiple lines. [#683](https://github.com/Azure/PSRule.Rules.Azure/issues/683)
|
||||
|
||||
## v1.1.2
|
||||
|
||||
What's changed since v1.1.1:
|
||||
|
||||
- Bug fixes:
|
||||
- Fixed copy peer property resolve. [#677](https://github.com/microsoft/PSRule.Rules.Azure/issues/677)
|
||||
- Fixed partial resource group or subscription object not populating. [#678](https://github.com/microsoft/PSRule.Rules.Azure/issues/678)
|
||||
- Fixed lazy loading of environment and resource providers. [#679](https://github.com/microsoft/PSRule.Rules.Azure/issues/679)
|
||||
- Fixed copy peer property resolve. [#677](https://github.com/Azure/PSRule.Rules.Azure/issues/677)
|
||||
- Fixed partial resource group or subscription object not populating. [#678](https://github.com/Azure/PSRule.Rules.Azure/issues/678)
|
||||
- Fixed lazy loading of environment and resource providers. [#679](https://github.com/Azure/PSRule.Rules.Azure/issues/679)
|
||||
|
||||
## v1.1.1
|
||||
|
||||
What's changed since v1.1.0:
|
||||
|
||||
- Bug fixes:
|
||||
- Fixed support for parameter file schemas. [#674](https://github.com/microsoft/PSRule.Rules.Azure/issues/674)
|
||||
- Fixed support for parameter file schemas. [#674](https://github.com/Azure/PSRule.Rules.Azure/issues/674)
|
||||
|
||||
## v1.1.0
|
||||
|
||||
What's changed since v1.0.0:
|
||||
|
||||
- New features:
|
||||
- Exporting template with `Export-AzRuleTemplateData` supports custom resource group and subscription. [#651](https://github.com/microsoft/PSRule.Rules.Azure/issues/651)
|
||||
- Exporting template with `Export-AzRuleTemplateData` supports custom resource group and subscription. [#651](https://github.com/Azure/PSRule.Rules.Azure/issues/651)
|
||||
- Subscription and resource group used for deployment can be specified instead of using defaults.
|
||||
- `ResourceGroupName` parameter of `Export-AzRuleTemplateData` has been renamed to `ResourceGroup`.
|
||||
- Added a parameter alias for `ResourceGroupName` on `Export-AzRuleTemplateData`.
|
||||
- New rules:
|
||||
- All resources:
|
||||
- Check template parameters are defined. [#631](https://github.com/microsoft/PSRule.Rules.Azure/issues/631)
|
||||
- Check location parameter is type string. [#632](https://github.com/microsoft/PSRule.Rules.Azure/issues/632)
|
||||
- Check template parameter `minValue` and `maxValue` constraints are valid. [#637](https://github.com/microsoft/PSRule.Rules.Azure/issues/637)
|
||||
- Check template resources do not use hard coded locations. [#633](https://github.com/microsoft/PSRule.Rules.Azure/issues/633)
|
||||
- Check resource group location not referenced instead of location parameter. [#634](https://github.com/microsoft/PSRule.Rules.Azure/issues/634)
|
||||
- Check increased debug detail is disabled for nested deployments. [#638](https://github.com/microsoft/PSRule.Rules.Azure/issues/638)
|
||||
- Check template parameters are defined. [#631](https://github.com/Azure/PSRule.Rules.Azure/issues/631)
|
||||
- Check location parameter is type string. [#632](https://github.com/Azure/PSRule.Rules.Azure/issues/632)
|
||||
- Check template parameter `minValue` and `maxValue` constraints are valid. [#637](https://github.com/Azure/PSRule.Rules.Azure/issues/637)
|
||||
- Check template resources do not use hard coded locations. [#633](https://github.com/Azure/PSRule.Rules.Azure/issues/633)
|
||||
- Check resource group location not referenced instead of location parameter. [#634](https://github.com/Azure/PSRule.Rules.Azure/issues/634)
|
||||
- Check increased debug detail is disabled for nested deployments. [#638](https://github.com/Azure/PSRule.Rules.Azure/issues/638)
|
||||
- General improvements:
|
||||
- Added support for matching template by name. [#661](https://github.com/microsoft/PSRule.Rules.Azure/issues/661)
|
||||
- Added support for matching template by name. [#661](https://github.com/Azure/PSRule.Rules.Azure/issues/661)
|
||||
- `Get-AzRuleTemplateLink` discovers `<templateName>.json` from `<templateName>.parameters.json`.
|
||||
- Engineering:
|
||||
- Bump PSRule dependency to v1.0.3. [#648](https://github.com/Microsoft/PSRule.Rules.Azure/issues/648)
|
||||
- Bump PSRule dependency to v1.0.3. [#648](https://github.com/Azure/PSRule.Rules.Azure/issues/648)
|
||||
- Bug fixes:
|
||||
- Fixed `Azure.VM.ADE` to limit rule to exports only. [#644](https://github.com/microsoft/PSRule.Rules.Azure/issues/644)
|
||||
- Fixed `if` condition values evaluation order. [#652](https://github.com/microsoft/PSRule.Rules.Azure/issues/652)
|
||||
- Fixed handling of `int` parameters with large values. [#653](https://github.com/microsoft/PSRule.Rules.Azure/issues/653)
|
||||
- Fixed handling of expressions split over multiple lines. [#654](https://github.com/microsoft/PSRule.Rules.Azure/issues/654)
|
||||
- Fixed handling of bool parameter values within logical expressions. [#655](https://github.com/microsoft/PSRule.Rules.Azure/issues/655)
|
||||
- Fixed copy loop value does not fall within the expected range. [#664](https://github.com/microsoft/PSRule.Rules.Azure/issues/664)
|
||||
- Fixed template comparison functions handling of large integer values. [#666](https://github.com/microsoft/PSRule.Rules.Azure/issues/666)
|
||||
- Fixed handling of `createArray` function with no arguments. [#667](https://github.com/microsoft/PSRule.Rules.Azure/issues/667)
|
||||
- Fixed `Azure.VM.ADE` to limit rule to exports only. [#644](https://github.com/Azure/PSRule.Rules.Azure/issues/644)
|
||||
- Fixed `if` condition values evaluation order. [#652](https://github.com/Azure/PSRule.Rules.Azure/issues/652)
|
||||
- Fixed handling of `int` parameters with large values. [#653](https://github.com/Azure/PSRule.Rules.Azure/issues/653)
|
||||
- Fixed handling of expressions split over multiple lines. [#654](https://github.com/Azure/PSRule.Rules.Azure/issues/654)
|
||||
- Fixed handling of bool parameter values within logical expressions. [#655](https://github.com/Azure/PSRule.Rules.Azure/issues/655)
|
||||
- Fixed copy loop value does not fall within the expected range. [#664](https://github.com/Azure/PSRule.Rules.Azure/issues/664)
|
||||
- Fixed template comparison functions handling of large integer values. [#666](https://github.com/Azure/PSRule.Rules.Azure/issues/666)
|
||||
- Fixed handling of `createArray` function with no arguments. [#667](https://github.com/Azure/PSRule.Rules.Azure/issues/667)
|
||||
|
||||
What's changed since pre-release v1.1.0-B2102034:
|
||||
|
||||
|
|
@ -348,19 +348,19 @@ What's changed since pre-release v1.1.0-B2102034:
|
|||
What's changed since pre-release v1.1.0-B2102023:
|
||||
|
||||
- General improvements:
|
||||
- Added support for matching template by name. [#661](https://github.com/microsoft/PSRule.Rules.Azure/issues/661)
|
||||
- Added support for matching template by name. [#661](https://github.com/Azure/PSRule.Rules.Azure/issues/661)
|
||||
- `Get-AzRuleTemplateLink` discovers `<templateName>.json` from `<templateName>.parameters.json`.
|
||||
- Bug fixes:
|
||||
- Fixed copy loop value does not fall within the expected range. [#664](https://github.com/microsoft/PSRule.Rules.Azure/issues/664)
|
||||
- Fixed template comparison functions handling of large integer values. [#666](https://github.com/microsoft/PSRule.Rules.Azure/issues/666)
|
||||
- Fixed handling of `createArray` function with no arguments. [#667](https://github.com/microsoft/PSRule.Rules.Azure/issues/667)
|
||||
- Fixed copy loop value does not fall within the expected range. [#664](https://github.com/Azure/PSRule.Rules.Azure/issues/664)
|
||||
- Fixed template comparison functions handling of large integer values. [#666](https://github.com/Azure/PSRule.Rules.Azure/issues/666)
|
||||
- Fixed handling of `createArray` function with no arguments. [#667](https://github.com/Azure/PSRule.Rules.Azure/issues/667)
|
||||
|
||||
## v1.1.0-B2102023 (pre-release)
|
||||
|
||||
What's changed since pre-release v1.1.0-B2102015:
|
||||
|
||||
- New features:
|
||||
- Exporting template with `Export-AzRuleTemplateData` supports custom resource group and subscription. [#651](https://github.com/microsoft/PSRule.Rules.Azure/issues/651)
|
||||
- Exporting template with `Export-AzRuleTemplateData` supports custom resource group and subscription. [#651](https://github.com/Azure/PSRule.Rules.Azure/issues/651)
|
||||
- Subscription and resource group used for deployment can be specified instead of using defaults.
|
||||
- `ResourceGroupName` parameter of `Export-AzRuleTemplateData` has been renamed to `ResourceGroup`.
|
||||
- Added a parameter alias for `ResourceGroupName` on `Export-AzRuleTemplateData`.
|
||||
|
|
@ -370,19 +370,19 @@ What's changed since pre-release v1.1.0-B2102015:
|
|||
What's changed since pre-release v1.1.0-B2102010:
|
||||
|
||||
- Bug fixes:
|
||||
- Fixed `if` condition values evaluation order. [#652](https://github.com/microsoft/PSRule.Rules.Azure/issues/652)
|
||||
- Fixed handling of `int` parameters with large values. [#653](https://github.com/microsoft/PSRule.Rules.Azure/issues/653)
|
||||
- Fixed handling of expressions split over multiple lines. [#654](https://github.com/microsoft/PSRule.Rules.Azure/issues/654)
|
||||
- Fixed handling of bool parameter values within logical expressions. [#655](https://github.com/microsoft/PSRule.Rules.Azure/issues/655)
|
||||
- Fixed `if` condition values evaluation order. [#652](https://github.com/Azure/PSRule.Rules.Azure/issues/652)
|
||||
- Fixed handling of `int` parameters with large values. [#653](https://github.com/Azure/PSRule.Rules.Azure/issues/653)
|
||||
- Fixed handling of expressions split over multiple lines. [#654](https://github.com/Azure/PSRule.Rules.Azure/issues/654)
|
||||
- Fixed handling of bool parameter values within logical expressions. [#655](https://github.com/Azure/PSRule.Rules.Azure/issues/655)
|
||||
|
||||
## v1.1.0-B2102010 (pre-release)
|
||||
|
||||
What's changed since pre-release v1.1.0-B2102001:
|
||||
|
||||
- Engineering:
|
||||
- Bump PSRule dependency to v1.0.3. [#648](https://github.com/Microsoft/PSRule.Rules.Azure/issues/648)
|
||||
- Bump PSRule dependency to v1.0.3. [#648](https://github.com/Azure/PSRule.Rules.Azure/issues/648)
|
||||
- Bug fixes:
|
||||
- Fixed `Azure.VM.ADE` to limit rule to exports only. [#644](https://github.com/microsoft/PSRule.Rules.Azure/issues/644)
|
||||
- Fixed `Azure.VM.ADE` to limit rule to exports only. [#644](https://github.com/Azure/PSRule.Rules.Azure/issues/644)
|
||||
|
||||
## v1.1.0-B2102001 (pre-release)
|
||||
|
||||
|
|
@ -390,14 +390,14 @@ What's changed since v1.0.0:
|
|||
|
||||
- New rules:
|
||||
- All resources:
|
||||
- Check template parameters are defined. [#631](https://github.com/microsoft/PSRule.Rules.Azure/issues/631)
|
||||
- Check location parameter is type string. [#632](https://github.com/microsoft/PSRule.Rules.Azure/issues/632)
|
||||
- Check template parameter `minValue` and `maxValue` constraints are valid. [#637](https://github.com/microsoft/PSRule.Rules.Azure/issues/637)
|
||||
- Check template resources do not use hard coded locations. [#633](https://github.com/microsoft/PSRule.Rules.Azure/issues/633)
|
||||
- Check resource group location not referenced instead of location parameter. [#634](https://github.com/microsoft/PSRule.Rules.Azure/issues/634)
|
||||
- Check increased debug detail is disabled for nested deployments. [#638](https://github.com/microsoft/PSRule.Rules.Azure/issues/638)
|
||||
- Check template parameters are defined. [#631](https://github.com/Azure/PSRule.Rules.Azure/issues/631)
|
||||
- Check location parameter is type string. [#632](https://github.com/Azure/PSRule.Rules.Azure/issues/632)
|
||||
- Check template parameter `minValue` and `maxValue` constraints are valid. [#637](https://github.com/Azure/PSRule.Rules.Azure/issues/637)
|
||||
- Check template resources do not use hard coded locations. [#633](https://github.com/Azure/PSRule.Rules.Azure/issues/633)
|
||||
- Check resource group location not referenced instead of location parameter. [#634](https://github.com/Azure/PSRule.Rules.Azure/issues/634)
|
||||
- Check increased debug detail is disabled for nested deployments. [#638](https://github.com/Azure/PSRule.Rules.Azure/issues/638)
|
||||
- Engineering:
|
||||
- Bump PSRule dependency to v1.0.2. [#635](https://github.com/Microsoft/PSRule.Rules.Azure/issues/635)
|
||||
- Bump PSRule dependency to v1.0.2. [#635](https://github.com/Azure/PSRule.Rules.Azure/issues/635)
|
||||
|
||||
## v1.0.0
|
||||
|
||||
|
|
@ -405,26 +405,26 @@ What's changed since v0.19.0:
|
|||
|
||||
- New rules:
|
||||
- All resources:
|
||||
- Check parameter default value type matches type. [#311](https://github.com/Microsoft/PSRule.Rules.Azure/issues/311)
|
||||
- Check location parameter defaults to resource group. [#361](https://github.com/Microsoft/PSRule.Rules.Azure/issues/361)
|
||||
- Check parameter default value type matches type. [#311](https://github.com/Azure/PSRule.Rules.Azure/issues/311)
|
||||
- Check location parameter defaults to resource group. [#361](https://github.com/Azure/PSRule.Rules.Azure/issues/361)
|
||||
- Front Door:
|
||||
- Check Front Door uses a health probe for each backend pool. [#546](https://github.com/Microsoft/PSRule.Rules.Azure/issues/546)
|
||||
- Check Front Door uses a dedicated health probe path backend pools. [#547](https://github.com/Microsoft/PSRule.Rules.Azure/issues/547)
|
||||
- Check Front Door uses HEAD requests for backend health probes. [#613](https://github.com/Microsoft/PSRule.Rules.Azure/issues/613)
|
||||
- Check Front Door uses a health probe for each backend pool. [#546](https://github.com/Azure/PSRule.Rules.Azure/issues/546)
|
||||
- Check Front Door uses a dedicated health probe path backend pools. [#547](https://github.com/Azure/PSRule.Rules.Azure/issues/547)
|
||||
- Check Front Door uses HEAD requests for backend health probes. [#613](https://github.com/Azure/PSRule.Rules.Azure/issues/613)
|
||||
- Service Fabric:
|
||||
- Check Service Fabric clusters use AAD client authentication. [#619](https://github.com/Microsoft/PSRule.Rules.Azure/issues/619)
|
||||
- Check Service Fabric clusters use AAD client authentication. [#619](https://github.com/Azure/PSRule.Rules.Azure/issues/619)
|
||||
- Updated rules:
|
||||
- Azure Kubernetes Service:
|
||||
- Updated `Azure.AKS.Version` to 1.19.6. [#603](https://github.com/Microsoft/PSRule.Rules.Azure/issues/603)
|
||||
- Updated `Azure.AKS.Version` to 1.19.6. [#603](https://github.com/Azure/PSRule.Rules.Azure/issues/603)
|
||||
- General improvements:
|
||||
- Renamed `Export-AzTemplateRuleData` to `Export-AzRuleTemplateData`. [#596](https://github.com/Microsoft/PSRule.Rules.Azure/issues/596)
|
||||
- Renamed `Export-AzTemplateRuleData` to `Export-AzRuleTemplateData`. [#596](https://github.com/Azure/PSRule.Rules.Azure/issues/596)
|
||||
- New name `Export-AzRuleTemplateData` aligns with prefix of other cmdlets.
|
||||
- Use of `Export-AzTemplateRuleData` is now deprecated and will be removed in the next major version.
|
||||
- Added alias to allow `Export-AzTemplateRuleData` to continue to be used.
|
||||
- Using `Export-AzTemplateRuleData` returns a deprecation warning.
|
||||
- Added support for `environment` template function. [#517](https://github.com/Microsoft/PSRule.Rules.Azure/issues/517)
|
||||
- Added support for `environment` template function. [#517](https://github.com/Azure/PSRule.Rules.Azure/issues/517)
|
||||
- Engineering:
|
||||
- Bump PSRule dependency to v1.0.1. [#611](https://github.com/Microsoft/PSRule.Rules.Azure/issues/611)
|
||||
- Bump PSRule dependency to v1.0.1. [#611](https://github.com/Azure/PSRule.Rules.Azure/issues/611)
|
||||
|
||||
What's changed since pre-release v1.0.0-B2101028:
|
||||
|
||||
|
|
@ -436,9 +436,9 @@ What's changed since pre-release v1.0.0-B2101016:
|
|||
|
||||
- New rules:
|
||||
- All resources:
|
||||
- Check parameter default value type matches type. [#311](https://github.com/Microsoft/PSRule.Rules.Azure/issues/311)
|
||||
- Check parameter default value type matches type. [#311](https://github.com/Azure/PSRule.Rules.Azure/issues/311)
|
||||
- General improvements:
|
||||
- Renamed `Export-AzTemplateRuleData` to `Export-AzRuleTemplateData`. [#596](https://github.com/Microsoft/PSRule.Rules.Azure/issues/596)
|
||||
- Renamed `Export-AzTemplateRuleData` to `Export-AzRuleTemplateData`. [#596](https://github.com/Azure/PSRule.Rules.Azure/issues/596)
|
||||
- New name `Export-AzRuleTemplateData` aligns with prefix of other cmdlets.
|
||||
- Use of `Export-AzTemplateRuleData` is now deprecated and will be removed in the next major version.
|
||||
- Added alias to allow `Export-AzTemplateRuleData` to continue to be used.
|
||||
|
|
@ -450,9 +450,9 @@ What's changed since pre-release v1.0.0-B2101006:
|
|||
|
||||
- New rules:
|
||||
- Service Fabric:
|
||||
- Check Service Fabric clusters use AAD client authentication. [#619](https://github.com/Microsoft/PSRule.Rules.Azure/issues/619)
|
||||
- Check Service Fabric clusters use AAD client authentication. [#619](https://github.com/Azure/PSRule.Rules.Azure/issues/619)
|
||||
- Bug fixes:
|
||||
- Fixed reason `Azure.FrontDoor.ProbePath` so the probe name is included. [#617](https://github.com/Microsoft/PSRule.Rules.Azure/issues/617)
|
||||
- Fixed reason `Azure.FrontDoor.ProbePath` so the probe name is included. [#617](https://github.com/Azure/PSRule.Rules.Azure/issues/617)
|
||||
|
||||
## v1.0.0-B2101006 (pre-release)
|
||||
|
||||
|
|
@ -460,17 +460,17 @@ What's changed since v0.19.0:
|
|||
|
||||
- New rules:
|
||||
- All resources:
|
||||
- Check location parameter defaults to resource group. [#361](https://github.com/Microsoft/PSRule.Rules.Azure/issues/361)
|
||||
- Check location parameter defaults to resource group. [#361](https://github.com/Azure/PSRule.Rules.Azure/issues/361)
|
||||
- Front Door:
|
||||
- Check Front Door uses a health probe for each backend pool. [#546](https://github.com/Microsoft/PSRule.Rules.Azure/issues/546)
|
||||
- Check Front Door uses a dedicated health probe path backend pools. [#547](https://github.com/Microsoft/PSRule.Rules.Azure/issues/547)
|
||||
- Check Front Door uses HEAD requests for backend health probes. [#613](https://github.com/Microsoft/PSRule.Rules.Azure/issues/613)
|
||||
- Check Front Door uses a health probe for each backend pool. [#546](https://github.com/Azure/PSRule.Rules.Azure/issues/546)
|
||||
- Check Front Door uses a dedicated health probe path backend pools. [#547](https://github.com/Azure/PSRule.Rules.Azure/issues/547)
|
||||
- Check Front Door uses HEAD requests for backend health probes. [#613](https://github.com/Azure/PSRule.Rules.Azure/issues/613)
|
||||
- Updated rules:
|
||||
- Azure Kubernetes Service:
|
||||
- Updated `Azure.AKS.Version` to 1.19.6. [#603](https://github.com/Microsoft/PSRule.Rules.Azure/issues/603)
|
||||
- Updated `Azure.AKS.Version` to 1.19.6. [#603](https://github.com/Azure/PSRule.Rules.Azure/issues/603)
|
||||
- General improvements:
|
||||
- Added support for `environment` template function. [#517](https://github.com/Microsoft/PSRule.Rules.Azure/issues/517)
|
||||
- Added support for `environment` template function. [#517](https://github.com/Azure/PSRule.Rules.Azure/issues/517)
|
||||
- Engineering:
|
||||
- Bump PSRule dependency to v1.0.1. [#611](https://github.com/Microsoft/PSRule.Rules.Azure/issues/611)
|
||||
- Bump PSRule dependency to v1.0.1. [#611](https://github.com/Azure/PSRule.Rules.Azure/issues/611)
|
||||
|
||||
[troubleshooting guide]: troubleshooting.md
|
||||
|
|
|
|||
|
|
@ -1,7 +1,7 @@
|
|||
---
|
||||
external help file: PSRule.Rules.Azure-help.xml
|
||||
Module Name: PSRule.Rules.Azure
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/commands/Export-AzRuleData.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/commands/Export-AzRuleData.md
|
||||
schema: 2.0.0
|
||||
---
|
||||
|
||||
|
|
|
|||
|
|
@ -1,7 +1,7 @@
|
|||
---
|
||||
external help file: PSRule.Rules.Azure-help.xml
|
||||
Module Name: PSRule.Rules.Azure
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/commands/Export-AzRuleTemplateData.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/commands/Export-AzRuleTemplateData.md
|
||||
schema: 2.0.0
|
||||
---
|
||||
|
||||
|
|
|
|||
|
|
@ -1,7 +1,7 @@
|
|||
---
|
||||
external help file: PSRule.Rules.Azure-help.xml
|
||||
Module Name: PSRule.Rules.Azure
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/commands/Get-AzRuleTemplateLink.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/commands/Get-AzRuleTemplateLink.md
|
||||
schema: 2.0.0
|
||||
---
|
||||
|
||||
|
|
|
|||
|
|
@ -1,7 +1,7 @@
|
|||
---
|
||||
Module Name: PSRule.Rules.Azure
|
||||
Module Guid: bce66f73-3809-4740-b3c3-f52958e7ab51
|
||||
Download Help Link: https://github.com/Microsoft/PSRule.Rules.Azure
|
||||
Download Help Link: https://github.com/Azure/PSRule.Rules.Azure
|
||||
Help Version: 0.1.0.0
|
||||
Locale: en-US
|
||||
---
|
||||
|
|
|
|||
|
|
@ -287,7 +287,7 @@ Example:
|
|||
|
||||
## NOTE
|
||||
|
||||
An online version of this document is available at https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/concepts/about_PSRule_Azure_Configuration.md.
|
||||
An online version of this document is available at https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/concepts/about_PSRule_Azure_Configuration.md.
|
||||
|
||||
## KEYWORDS
|
||||
|
||||
|
|
|
|||
|
|
@ -33,11 +33,11 @@ For example:
|
|||
|
||||
## NOTE
|
||||
|
||||
An online version of this document is available at https://github.com/microsoft/PSRule.Rules.Azure/blob/main/docs/concepts/about_PSRule_Azure_Metadata_Link.md.
|
||||
An online version of this document is available at https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/concepts/about_PSRule_Azure_Metadata_Link.md.
|
||||
|
||||
## SEE ALSO
|
||||
|
||||
- [Get-AzRuleTemplateLink](https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/commands/Get-AzRuleTemplateLink.md)
|
||||
- [Get-AzRuleTemplateLink](https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/commands/Get-AzRuleTemplateLink.md)
|
||||
|
||||
## KEYWORDS
|
||||
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Critical
|
|||
pillar: Security
|
||||
category: Identity and access management
|
||||
resource: Container Registry
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.ACR.AdminUser.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.ACR.AdminUser.md
|
||||
ms-content-id: bbf194a7-6ca3-4b1d-9170-6217eb26620d
|
||||
---
|
||||
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Critical
|
|||
pillar: Security
|
||||
category: Applications and services
|
||||
resource: Container Registry
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.ACR.ContainerScan.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.ACR.ContainerScan.md
|
||||
---
|
||||
|
||||
# Scan ACR container images
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Important
|
|||
pillar: Security
|
||||
category: Encryption
|
||||
resource: Container Registry
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.ACR.ContentTrust.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.ACR.ContentTrust.md
|
||||
---
|
||||
|
||||
# Use trusted container images
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Important
|
|||
pillar: Reliability
|
||||
category: Data management
|
||||
resource: Container Registry
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.ACR.GeoReplica.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.ACR.GeoReplica.md
|
||||
---
|
||||
|
||||
# Geo-replicate container images
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Critical
|
|||
pillar: Security
|
||||
category: Applications and services
|
||||
resource: Container Registry
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.ACR.ImageHealth.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.ACR.ImageHealth.md
|
||||
---
|
||||
|
||||
# Remove vulnerable container images
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Important
|
|||
pillar: Operational Excellence
|
||||
category: Deployment
|
||||
resource: Container Registry
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.ACR.MinSku.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.ACR.MinSku.md
|
||||
ms-content-id: a70d16d4-3717-4eef-b588-8a0204860d6e
|
||||
---
|
||||
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Awareness
|
|||
pillar: Operational Excellence
|
||||
category: Tagging and resource naming
|
||||
resource: Container Registry
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.ACR.Name.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.ACR.Name.md
|
||||
---
|
||||
|
||||
# Use valid registry names
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Important
|
|||
pillar: Security
|
||||
category: Applications and services
|
||||
resource: Container Registry
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.ACR.Quarantine.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.ACR.Quarantine.md
|
||||
---
|
||||
|
||||
# Use container image quarantine
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Important
|
|||
pillar: Cost Optimization
|
||||
category: Resource usage
|
||||
resource: Container Registry
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.ACR.Retention.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.ACR.Retention.md
|
||||
---
|
||||
|
||||
# Configure ACR retention policies
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Important
|
|||
pillar: Cost Optimization
|
||||
category: Resource usage
|
||||
resource: Container Registry
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.ACR.Usage.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.ACR.Usage.md
|
||||
---
|
||||
|
||||
# Container registry storage usage
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Important
|
|||
pillar: Security
|
||||
category: Design
|
||||
resource: Azure Kubernetes Service
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AKS.AuthorizedIPs.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AKS.AuthorizedIPs.md
|
||||
---
|
||||
|
||||
# Restrict access to AKS API server endpoints
|
||||
|
|
|
|||
|
|
@ -4,7 +4,7 @@ pillar: Reliability
|
|||
category: Design
|
||||
resource: Azure Kubernetes Service
|
||||
preview: true
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AKS.AutoUpgrade.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AKS.AutoUpgrade.md
|
||||
---
|
||||
|
||||
# Set AKS auto-upgrade channel
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Important
|
|||
pillar: Security
|
||||
category: Optimize
|
||||
resource: Azure Kubernetes Service
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AKS.AzurePolicyAddOn.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AKS.AzurePolicyAddOn.md
|
||||
---
|
||||
|
||||
# Use Azure Policy Add-on with AKS clusters
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Important
|
|||
pillar: Security
|
||||
category: Identity and access management
|
||||
resource: Azure Kubernetes Service
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AKS.AzureRBAC.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AKS.AzureRBAC.md
|
||||
---
|
||||
|
||||
# Use Azure RBAC for Kubernetes Authorization
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Awareness
|
|||
pillar: Operational Excellence
|
||||
category: Tagging and resource naming
|
||||
resource: Azure Kubernetes Service
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AKS.DNSPrefix.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AKS.DNSPrefix.md
|
||||
---
|
||||
|
||||
# Use valid AKS cluster DNS prefix
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Important
|
|||
pillar: Security
|
||||
category: Identity and access management
|
||||
resource: Azure Kubernetes Service
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AKS.LocalAccounts.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AKS.LocalAccounts.md
|
||||
---
|
||||
|
||||
# Disable AKS local accounts
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Important
|
|||
pillar: Security
|
||||
category: Identity and access management
|
||||
resource: Azure Kubernetes Service
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AKS.ManagedAAD.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AKS.ManagedAAD.md
|
||||
---
|
||||
|
||||
# Enable AKS-managed Azure AD
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Important
|
|||
pillar: Operational Excellence
|
||||
category: Configuration
|
||||
resource: Azure Kubernetes Service
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AKS.ManagedIdentity.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AKS.ManagedIdentity.md
|
||||
---
|
||||
|
||||
# Use managed identities for AKS cluster authentication
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Important
|
|||
pillar: Reliability
|
||||
category: Load balancing and failover
|
||||
resource: Azure Kubernetes Service
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AKS.MinNodeCount.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AKS.MinNodeCount.md
|
||||
ms-content-id: 320afea5-5c19-45ad-b9a5-c1a63ae6e114
|
||||
---
|
||||
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Awareness
|
|||
pillar: Operational Excellence
|
||||
category: Tagging and resource naming
|
||||
resource: Azure Kubernetes Service
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AKS.Name.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AKS.Name.md
|
||||
---
|
||||
|
||||
# Use valid AKS cluster names
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Important
|
|||
pillar: Security
|
||||
category: Network security and containment
|
||||
resource: Azure Kubernetes Service
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AKS.NetworkPolicy.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AKS.NetworkPolicy.md
|
||||
---
|
||||
|
||||
# AKS clusters use Azure Network Policies
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Important
|
|||
pillar: Performance Efficiency
|
||||
category: Capacity planning
|
||||
resource: Azure Kubernetes Service
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AKS.NodeMinPods.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AKS.NodeMinPods.md
|
||||
---
|
||||
|
||||
# Nodes use a minimum number of pods
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Important
|
|||
pillar: Performance Efficiency
|
||||
category: Capacity planning
|
||||
resource: Azure Kubernetes Service
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AKS.PoolScaleSet.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AKS.PoolScaleSet.md
|
||||
---
|
||||
|
||||
# AKS clusters use VM scale sets
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Important
|
|||
pillar: Reliability
|
||||
category: Design
|
||||
resource: Azure Kubernetes Service
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AKS.PoolVersion.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AKS.PoolVersion.md
|
||||
---
|
||||
|
||||
# Upgrade AKS node pool version
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Important
|
|||
pillar: Performance Efficiency
|
||||
category: Capacity planning
|
||||
resource: Azure Kubernetes Service
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AKS.StandardLB.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AKS.StandardLB.md
|
||||
---
|
||||
|
||||
# Use the Standard load balancer SKU
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Important
|
|||
pillar: Security
|
||||
category: Identity and access management
|
||||
resource: Azure Kubernetes Service
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AKS.UseRBAC.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AKS.UseRBAC.md
|
||||
ms-content-id: 61ff3a23-9bfd-4e91-8959-798b43237775
|
||||
---
|
||||
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Important
|
|||
pillar: Reliability
|
||||
category: Design
|
||||
resource: Azure Kubernetes Service
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AKS.Version.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AKS.Version.md
|
||||
ms-content-id: b0bd4e66-af2f-4d0a-82ae-e4738418bb7e
|
||||
---
|
||||
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Awareness
|
|||
pillar: Operational Excellence
|
||||
category: Tagging and resource naming
|
||||
resource: API Management
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.APIM.APIDescriptors.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.APIM.APIDescriptors.md
|
||||
---
|
||||
|
||||
# Use API descriptors
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Important
|
|||
pillar: Operational Excellence
|
||||
category: Deployment
|
||||
resource: API Management
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.APIM.CertificateExpiry.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.APIM.CertificateExpiry.md
|
||||
---
|
||||
|
||||
# API Management uses current certificates
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Important
|
|||
pillar: Security
|
||||
category: Encryption
|
||||
resource: API Management
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.APIM.EncryptValues.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.APIM.EncryptValues.md
|
||||
---
|
||||
|
||||
# Use encrypted named values
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Critical
|
|||
pillar: Security
|
||||
category: Encryption
|
||||
resource: API Management
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.APIM.HTTPBackend.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.APIM.HTTPBackend.md
|
||||
---
|
||||
|
||||
# Use HTTPS backend connections
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Important
|
|||
pillar: Security
|
||||
category: Encryption
|
||||
resource: API Management
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.APIM.HTTPEndpoint.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.APIM.HTTPEndpoint.md
|
||||
---
|
||||
|
||||
# Publish APIs through HTTPS connections
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Important
|
|||
pillar: Security
|
||||
category: Identity and access management
|
||||
resource: API Management
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.APIM.ManagedIdentity.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.APIM.ManagedIdentity.md
|
||||
---
|
||||
|
||||
# API Management uses a managed identity
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Awareness
|
|||
pillar: Operational Excellence
|
||||
category: Tagging and resource naming
|
||||
resource: API Management
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.APIM.Name.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.APIM.Name.md
|
||||
---
|
||||
|
||||
# Use valid API Management service names
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Important
|
|||
pillar: Security
|
||||
category: Identity and access management
|
||||
resource: API Management
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.APIM.ProductApproval.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.APIM.ProductApproval.md
|
||||
---
|
||||
|
||||
# Require approval for products
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Awareness
|
|||
pillar: Operational Excellence
|
||||
category: Tagging and resource naming
|
||||
resource: API Management
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.APIM.ProductDescriptors.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.APIM.ProductDescriptors.md
|
||||
---
|
||||
|
||||
# Use product descriptors
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Important
|
|||
pillar: Security
|
||||
category: Identity and access management
|
||||
resource: API Management
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.APIM.ProductSubscription.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.APIM.ProductSubscription.md
|
||||
---
|
||||
|
||||
# Require a subscription for products
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Important
|
|||
pillar: Operational Excellence
|
||||
category: Configuration
|
||||
resource: API Management
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.APIM.ProductTerms.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.APIM.ProductTerms.md
|
||||
---
|
||||
|
||||
# Use API product legal terms
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Important
|
|||
pillar: Security
|
||||
category: Encryption
|
||||
resource: API Management
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.APIM.Protocols.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.APIM.Protocols.md
|
||||
---
|
||||
|
||||
# Use secure protocols
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Awareness
|
|||
pillar: Operational Excellence
|
||||
category: Configuration
|
||||
resource: API Management
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.APIM.SampleProducts.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.APIM.SampleProducts.md
|
||||
---
|
||||
|
||||
# Remove default products
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Awareness
|
|||
pillar: Operational Excellence
|
||||
category: Tagging and resource naming
|
||||
resource: App Configuration
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AppConfig.Name.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AppConfig.Name.md
|
||||
---
|
||||
|
||||
# Use valid App Configuration store names
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Important
|
|||
pillar: Operational Excellence
|
||||
category: Deployment
|
||||
resource: App Configuration
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AppConfig.SKU.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AppConfig.SKU.md
|
||||
---
|
||||
|
||||
# Use production App Configuration SKU
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Important
|
|||
pillar: Reliability
|
||||
category: Load balancing and failover
|
||||
resource: Application Gateway
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AppGw.MinInstance.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AppGw.MinInstance.md
|
||||
---
|
||||
|
||||
# Use two or more Application Gateway instances
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Important
|
|||
pillar: Operational Excellence
|
||||
category: Deployment
|
||||
resource: Application Gateway
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AppGw.MinSku.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AppGw.MinSku.md
|
||||
---
|
||||
|
||||
# Use production Application Gateway SKU
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Important
|
|||
pillar: Security
|
||||
category: Network security and containment
|
||||
resource: Application Gateway
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AppGw.OWASP.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AppGw.OWASP.md
|
||||
---
|
||||
|
||||
# Use OWASP 3.x rules
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Critical
|
|||
pillar: Security
|
||||
category: Network security and containment
|
||||
resource: Application Gateway
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AppGw.Prevention.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AppGw.Prevention.md
|
||||
---
|
||||
|
||||
# Use WAF prevention mode
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Critical
|
|||
pillar: Security
|
||||
category: Encryption
|
||||
resource: Application Gateway
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AppGw.SSLPolicy.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AppGw.SSLPolicy.md
|
||||
---
|
||||
|
||||
# Application Gateways use a minimum TLS 1.2
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Critical
|
|||
pillar: Security
|
||||
category: Network security and containment
|
||||
resource: Application Gateway
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AppGw.UseWAF.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AppGw.UseWAF.md
|
||||
---
|
||||
|
||||
# Application Gateway uses WAF SKU
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Critical
|
|||
pillar: Security
|
||||
category: Network security and containment
|
||||
resource: Application Gateway
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AppGw.WAFEnabled.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AppGw.WAFEnabled.md
|
||||
---
|
||||
|
||||
# Application Gateway WAF is enabled
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Important
|
|||
pillar: Security
|
||||
category: Network security and containment
|
||||
resource: Application Gateway
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AppGw.WAFRules.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AppGw.WAFRules.md
|
||||
---
|
||||
|
||||
# Application Gateway rules are enabled
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Awareness
|
|||
pillar: Performance Efficiency
|
||||
category: Application design
|
||||
resource: App Service
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AppService.ARRAffinity.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AppService.ARRAffinity.md
|
||||
ms-content-id: 3f07def6-6e5e-4f87-8b5d-3a0baf6631e5
|
||||
---
|
||||
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Important
|
|||
pillar: Performance Efficiency
|
||||
category: Application design
|
||||
resource: App Service
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AppService.AlwaysOn.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AppService.AlwaysOn.md
|
||||
---
|
||||
|
||||
# Use App Service Always On
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Awareness
|
|||
pillar: Performance Efficiency
|
||||
category: Application design
|
||||
resource: App Service
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AppService.HTTP2.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AppService.HTTP2.md
|
||||
---
|
||||
|
||||
# Use HTTP/2 connections for App Service apps
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Important
|
|||
pillar: Security
|
||||
category: Identity and access management
|
||||
resource: App Service
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AppService.ManagedIdentity.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AppService.ManagedIdentity.md
|
||||
---
|
||||
|
||||
# App Service apps uses a managed identity
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Important
|
|||
pillar: Operational Excellence
|
||||
category: Deployment
|
||||
resource: App Service
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AppService.MinPlan.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AppService.MinPlan.md
|
||||
ms-content-id: 97b58cfa-7b7e-4630-ac13-4596defe1795
|
||||
---
|
||||
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Critical
|
|||
pillar: Security
|
||||
category: Encryption
|
||||
resource: App Service
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AppService.MinTLS.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AppService.MinTLS.md
|
||||
ms-content-id: e19fbe7e-da05-47d4-8de1-2fdf52ada662
|
||||
---
|
||||
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Important
|
|||
pillar: Operational Excellence
|
||||
category: Deployment
|
||||
resource: App Service
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AppService.NETVersion.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AppService.NETVersion.md
|
||||
---
|
||||
|
||||
# Use a newer .NET Framework version
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Important
|
|||
pillar: Operational Excellence
|
||||
category: Deployment
|
||||
resource: App Service
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AppService.PHPVersion.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AppService.PHPVersion.md
|
||||
---
|
||||
|
||||
# Use a newer PHP runtime version
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Important
|
|||
pillar: Reliability
|
||||
category: Load balancing and failover
|
||||
resource: App Service
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AppService.PlanInstanceCount.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AppService.PlanInstanceCount.md
|
||||
ms-content-id: 6f3eff05-1bd0-4c82-a5a5-573fc8e0beda
|
||||
---
|
||||
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Important
|
|||
pillar: Security
|
||||
category: Security configuration
|
||||
resource: App Service
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AppService.RemoteDebug.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AppService.RemoteDebug.md
|
||||
---
|
||||
|
||||
# Disable App Service remote debugging
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Important
|
|||
pillar: Security
|
||||
category: Encryption
|
||||
resource: App Service
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AppService.UseHTTPS.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.AppService.UseHTTPS.md
|
||||
ms-content-id: b26053bc-db4a-487a-8fb1-11c438c8d493
|
||||
---
|
||||
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Important
|
|||
pillar: Security
|
||||
category: Encryption
|
||||
resource: Automation Service
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.Automation.EncryptVariables.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.Automation.EncryptVariables.md
|
||||
ms-content-id: 3c74b891-bf52-44a8-8b71-f7219f83c2ce
|
||||
---
|
||||
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Awareness
|
|||
pillar: Security
|
||||
category: Identity and access management
|
||||
resource: Automation Service
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.Automation.WebHookExpiry.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.Automation.WebHookExpiry.md
|
||||
ms-content-id: 7b8aa617-6278-42e4-b8ae-d9da6e3d8ade
|
||||
---
|
||||
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Awareness
|
|||
pillar: Operational Excellence
|
||||
category: Tagging and resource naming
|
||||
resource: Content Delivery Network
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.CDN.EndpointName.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.CDN.EndpointName.md
|
||||
---
|
||||
|
||||
# Use valid CDN endpoint names
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Important
|
|||
pillar: Security
|
||||
category: Encryption
|
||||
resource: Content Delivery Network
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.CDN.HTTP.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.CDN.HTTP.md
|
||||
---
|
||||
|
||||
# Use HTTPS client connections
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Important
|
|||
pillar: Security
|
||||
category: Encryption
|
||||
resource: Content Delivery Network
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.CDN.MinTLS.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.CDN.MinTLS.md
|
||||
---
|
||||
|
||||
# Azure CDN endpoint minimum TLS version
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Awareness
|
|||
pillar: Operational Excellence
|
||||
category: Deployment
|
||||
resource: Data Factory
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.DataFactory.Version.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.DataFactory.Version.md
|
||||
---
|
||||
|
||||
# Use Data Factory v2
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Critical
|
|||
pillar: Security
|
||||
category: Network security and containment
|
||||
resource: Firewall
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.Firewall.Mode.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.Firewall.Mode.md
|
||||
---
|
||||
|
||||
# Configure deny on threat intel
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Important
|
|||
pillar: Security
|
||||
category: Security operations
|
||||
resource: Front Door
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.FrontDoor.Logs.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.FrontDoor.Logs.md
|
||||
---
|
||||
|
||||
# Audit Front Door access
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Critical
|
|||
pillar: Security
|
||||
category: Encryption
|
||||
resource: Front Door
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.FrontDoor.MinTLS.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.FrontDoor.MinTLS.md
|
||||
---
|
||||
|
||||
# Front Door minimum TLS
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Awareness
|
|||
pillar: Operational Excellence
|
||||
category: Tagging and resource naming
|
||||
resource: Front Door
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.FrontDoor.Name.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.FrontDoor.Name.md
|
||||
---
|
||||
|
||||
# Use valid Front Door names
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Important
|
|||
pillar: Reliability
|
||||
category: Load balancing and failover
|
||||
resource: Front Door
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.FrontDoor.Probe.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.FrontDoor.Probe.md
|
||||
---
|
||||
|
||||
# Use health probes for Front Door backends
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Important
|
|||
pillar: Reliability
|
||||
category: Load balancing and failover
|
||||
resource: Front Door
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.FrontDoor.ProbeMethod.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.FrontDoor.ProbeMethod.md
|
||||
---
|
||||
|
||||
# Use HEAD health probes for Front Door backends
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Important
|
|||
pillar: Reliability
|
||||
category: Load balancing and failover
|
||||
resource: Front Door
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.FrontDoor.ProbePath.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.FrontDoor.ProbePath.md
|
||||
---
|
||||
|
||||
# Use a dedicated health endpoint for Front Door backends
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Awareness
|
|||
pillar: Cost Optimization
|
||||
category: Resource usage
|
||||
resource: Front Door
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.FrontDoor.State.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.FrontDoor.State.md
|
||||
---
|
||||
|
||||
# Enable Front Door instance
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Critical
|
|||
pillar: Security
|
||||
category: Network security and containment
|
||||
resource: Front Door
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.FrontDoor.UseWAF.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.FrontDoor.UseWAF.md
|
||||
---
|
||||
|
||||
# Front Door endpoints should use WAF
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Critical
|
|||
pillar: Security
|
||||
category: Network security and containment
|
||||
resource: Front Door
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.FrontDoor.WAF.Enabled.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.FrontDoor.WAF.Enabled.md
|
||||
---
|
||||
|
||||
# Enable Front Door WAF policy
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Critical
|
|||
pillar: Security
|
||||
category: Network security and containment
|
||||
resource: Front Door
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.FrontDoor.WAF.Mode.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.FrontDoor.WAF.Mode.md
|
||||
---
|
||||
|
||||
# Use Front Door WAF policy in prevention mode
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Awareness
|
|||
pillar: Operational Excellence
|
||||
category: Tagging and resource naming
|
||||
resource: Front Door
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.FrontDoor.WAF.Name.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.FrontDoor.WAF.Name.md
|
||||
---
|
||||
|
||||
# Use valid Front Door WAF policy names
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Important
|
|||
pillar: Security
|
||||
category: Identity and access management
|
||||
resource: Key Vault
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.KeyVault.AccessPolicy.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.KeyVault.AccessPolicy.md
|
||||
---
|
||||
|
||||
# Limit access to Key Vault data
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Awareness
|
|||
pillar: Operational Excellence
|
||||
category: Tagging and resource naming
|
||||
resource: Key Vault
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.KeyVault.KeyName.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.KeyVault.KeyName.md
|
||||
---
|
||||
|
||||
# Use valid Key Vault Key names
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Important
|
|||
pillar: Security
|
||||
category: Security operations
|
||||
resource: Key Vault
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.KeyVault.Logs.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.KeyVault.Logs.md
|
||||
---
|
||||
|
||||
# Audit Key Vault data access
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Awareness
|
|||
pillar: Operational Excellence
|
||||
category: Tagging and resource naming
|
||||
resource: Key Vault
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.KeyVault.Name.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.KeyVault.Name.md
|
||||
---
|
||||
|
||||
# Use valid Key Vault names
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ severity: Important
|
|||
pillar: Reliability
|
||||
category: Data management
|
||||
resource: Key Vault
|
||||
online version: https://github.com/Microsoft/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.KeyVault.PurgeProtect.md
|
||||
online version: https://github.com/Azure/PSRule.Rules.Azure/blob/main/docs/en/rules/Azure.KeyVault.PurgeProtect.md
|
||||
---
|
||||
|
||||
# Use Key Vault Purge Protection
|
||||
|
|
|
|||
Некоторые файлы не были показаны из-за слишком большого количества измененных файлов Показать больше
Загрузка…
Ссылка в новой задаче