diff --git a/README.md b/README.md index fa4b330..f6c2e43 100644 --- a/README.md +++ b/README.md @@ -24,413 +24,413 @@ A curated list of AWESOME blogs, videos, tutorials, code, tools, scripts. Anythi ### Microsoft Learn -- [Address Tangible Risks With The Govern Methodology Of The Cloud Adoption Framework For Azure](https://docs.microsoft.com/en-us/learn/modules/cloud-adoption-framework-govern/?WT.mc_id=AZ-MVP-5004598) -- [Azure Kubernetes Services Governance with Azure Policy](https://docs.microsoft.com/en-us/learn/modules/aks-governance-azure-policy/?WT.mc_id=AZ-MVP-5004598) -- [Build Cloud Governance Strategy On Azure](https://docs.microsoft.com/en-us/learn/modules/build-cloud-governance-strategy-azure/?WT.mc_id=AZ-MVP-5004598) -- [Configure Azure Policy](https://docs.microsoft.com/en-us/learn/modules/configure-azure-policy/?WT.mc_id=AZ-MVP-5004598) -- [Design An Enterprise Governance Strategy](https://docs.microsoft.com/en-us/learn/modules/enterprise-governance/?WT.mc_id=AZ-MVP-5004598) -- [Design Governance](https://docs.microsoft.com/en-us/learn/modules/design-governance/?WT.mc_id=AZ-MVP-5004598) -- [Intro to Azure Policy](https://docs.microsoft.com/en-us/learn/modules/intro-to-azure-policy/?WT.mc_id=AZ-MVP-5004598) -- [Manage security operations in Azure](https://docs.microsoft.com/en-us/learn/paths/manage-security-operations/?WT.mc_id=AZ-MVP-5004598) +- [Address Tangible Risks With The Govern Methodology Of The Cloud Adoption Framework For Azure](https://docs.microsoft.com/en-us/learn/modules/cloud-adoption-framework-govern/?WT.mc_id=AZ-MVP-5004598) - Governance, Risk Management +- [Azure Kubernetes Services Governance with Azure Policy](https://docs.microsoft.com/en-us/learn/modules/aks-governance-azure-policy/?WT.mc_id=AZ-MVP-5004598) - Kubernetes, Governance, Policy +- [Build Cloud Governance Strategy On Azure](https://docs.microsoft.com/en-us/learn/modules/build-cloud-governance-strategy-azure/?WT.mc_id=AZ-MVP-5004598) - Governance, Strategy, Cloud +- [Configure Azure Policy](https://docs.microsoft.com/en-us/learn/modules/configure-azure-policy/?WT.mc_id=AZ-MVP-5004598) - Configuration, Policy, Azure +- [Design An Enterprise Governance Strategy](https://docs.microsoft.com/en-us/learn/modules/enterprise-governance/?WT.mc_id=AZ-MVP-5004598) - Governance, Enterprise, Strategy +- [Design Governance](https://docs.microsoft.com/en-us/learn/modules/design-governance/?WT.mc_id=AZ-MVP-5004598) - Governance, Design, Strategy +- [Intro to Azure Policy](https://docs.microsoft.com/en-us/learn/modules/intro-to-azure-policy/?WT.mc_id=AZ-MVP-5004598) - Introduction, Policy, Azure +- [Manage security operations in Azure](https://docs.microsoft.com/en-us/learn/paths/manage-security-operations/?WT.mc_id=AZ-MVP-5004598) - Security, Operations, Management ### Microsoft Docs -- [Adopt Policy-Driven Guardrails](https://docs.microsoft.com/en-us/azure/cloud-adoption-framework/ready/enterprise-scale/dine-guidance?WT.mc_id=AZ-MVP-5004598) -- [ARM Templates - Azure Policy Assignments](https://docs.microsoft.com/en-us/azure/templates/microsoft.authorization/policyassignments?tabs=bicep?WT.mc_id=AZ-MVP-5004598) -- [ARM Templates - Azure Policy Definitions](https://docs.microsoft.com/en-us/azure/templates/microsoft.authorization/policydefinitions?tabs=bicep?WT.mc_id=AZ-MVP-5004598) -- [ARM Templates - Azure Policy Exemptions](https://docs.microsoft.com/en-us/azure/templates/microsoft.authorization/policyexemptions?tabs=bicep?WT.mc_id=AZ-MVP-5004598) -- [ARM Templates - Azure PolicySet Definitions](https://docs.microsoft.com/en-us/azure/templates/microsoft.authorization/policysetdefinitions?tabs=bicep?WT.mc_id=AZ-MVP-5004598) -- [Azure CLI - Azure Policy](https://docs.microsoft.com/en-us/cli/azure/policy?view=azure-cli-latest?WT.mc_id=AZ-MVP-5004598) -- [Azure Policy](https://docs.microsoft.com/en-us/azure/governance/policy/?WT.mc_id=AZ-MVP-5004598) -- [Deploy and manage Traffic Analytics using Azure Policy](https://docs.microsoft.com/en-us/azure/network-watcher/traffic-analytics-policy-portal?WT.mc_id=AZ-MVP-5004598) -- [Policies included in Azure Landing Zones reference implementations](https://github.com/Azure/Enterprise-Scale/blob/main/docs/ESLZ-Policies.md) -- [PowerShell - Azure Policy](https://docs.microsoft.com/en-us/powershell/module/az.resources/?view=azps-7.1.0#policy?WT.mc_id=AZ-MVP-5004598) -- [Secure your cluster with Azure Policy](https://docs.microsoft.com/en-us/azure/aks/use-azure-policy?toc=/azure/governance/policy/toc.json&bc=/azure/governance/policy/breadcrumb/toc.json?WT.mc_id=AZ-MVP-5004598) -- [Understand Azure Policy for Kubernetes clusters](https://docs.microsoft.com/en-us/azure/governance/policy/concepts/policy-for-kubernetes?WT.mc_id=AZ-MVP-5004598) -- [Use Azure Policy extension for Visual Studio Code](https://docs.microsoft.com/en-us/azure/governance/policy/how-to/extension-for-vscode?WT.mc_id=AZ-MVP-5004598) +- [Adopt Policy-Driven Guardrails](https://docs.microsoft.com/en-us/azure/cloud-adoption-framework/ready/enterprise-scale/dine-guidance?WT.mc_id=AZ-MVP-5004598) - Policy, Guardrails, Adoption +- [ARM Templates - Azure Policy Assignments](https://docs.microsoft.com/en-us/azure/templates/microsoft.authorization/policyassignments?tabs=bicep?WT.mc_id=AZ-MVP-5004598) - ARM, Templates, Policy +- [ARM Templates - Azure Policy Definitions](https://docs.microsoft.com/en-us/azure/templates/microsoft.authorization/policydefinitions?tabs=bicep?WT.mc_id=AZ-MVP-5004598) - ARM, Templates, Policy +- [ARM Templates - Azure Policy Exemptions](https://docs.microsoft.com/en-us/azure/templates/microsoft.authorization/policyexemptions?tabs=bicep?WT.mc_id=AZ-MVP-5004598) - ARM, Templates, Policy +- [ARM Templates - Azure PolicySet Definitions](https://docs.microsoft.com/en-us/azure/templates/microsoft.authorization/policysetdefinitions?tabs=bicep?WT.mc_id=AZ-MVP-5004598) - ARM, Templates, Policy +- [Azure CLI - Azure Policy](https://docs.microsoft.com/en-us/cli/azure/policy?view=azure-cli-latest?WT.mc_id=AZ-MVP-5004598) - CLI, Policy, Azure +- [Azure Policy](https://docs.microsoft.com/en-us/azure/governance/policy/?WT.mc_id=AZ-MVP-5004598) - Governance, Policy, Azure +- [Deploy and manage Traffic Analytics using Azure Policy](https://docs.microsoft.com/en-us/azure/network-watcher/traffic-analytics-policy-portal?WT.mc_id=AZ-MVP-5004598) - Traffic, Analytics, Policy +- [Policies included in Azure Landing Zones reference implementations](https://github.com/Azure/Enterprise-Scale/blob/main/docs/ESLZ-Policies.md) - Policies, Landing Zones, Reference +- [PowerShell - Azure Policy](https://docs.microsoft.com/en-us/powershell/module/az.resources/?view=azps-7.1.0#policy?WT.mc_id=AZ-MVP-5004598) - PowerShell, Policy, Azure +- [Secure your cluster with Azure Policy](https://docs.microsoft.com/en-us/azure/aks/use-azure-policy?toc=/azure/governance/policy/toc.json&bc=/azure/governance/policy/breadcrumb/toc.json?WT.mc_id=AZ-MVP-5004598) - Security, Cluster, Policy +- [Understand Azure Policy for Kubernetes clusters](https://docs.microsoft.com/en-us/azure/governance/policy/concepts/policy-for-kubernetes?WT.mc_id=AZ-MVP-5004598) - Kubernetes, Policy, Concepts +- [Use Azure Policy extension for Visual Studio Code](https://docs.microsoft.com/en-us/azure/governance/policy/how-to/extension-for-vscode?WT.mc_id=AZ-MVP-5004598) - Extension, Visual Studio Code, Policy ### Microsoft Videos -- [Azure Governance & Deployments Quarterly Customer Panel December 2021](https://youtu.be/oYC5Ns7kLCY) -- [Azure Governance and Deployments Quarterly Customer Panel Feb 2021](https://www.youtube.com/watch?v=ONKn9XMPZCs) -- [Azure Governance and Deployments Quarterly Customer Panel May 2021](https://www.youtube.com/watch?v=tHyPDESIThk) -- [Azure Governance and the latest updates on Azure Policy](https://youtu.be/smyQv3MHe10) -- [Azure Governance for ISVs, Session 02: Policies, Initiatives, and Blueprints](https://youtu.be/SMvbFBdWi5U) -- [Azure Policy and Kubernetes](https://youtu.be/Hv3K8zJSbow) -- [Azure Policy on Azure Kubernetes Service](https://youtu.be/mfFdH7v3Vl8) -- [Azure Takeoff Show - Azure Policies and Locks](https://youtu.be/XqCcGZFbuCU?si=n9ma6cQpwNUO_CE7) -- [AzureFunBytes - Intro to Azure Policy](https://youtu.be/2ebTY4Bzah0) -- [Compliance with Azure Policy](https://www.youtube.com/watch?v=OZh_4gjgvGU) -- [Deep dive into Implementing governance at scale through Azure Policy](https://youtu.be/d6c1nfoySLI) -- [Enforcement with Azure Policy](https://www.youtube.com/watch?v=yQvFeuPoHe0) -- [Getting started with Azure Policy](https://www.youtube.com/watch?v=b0Sp6V0VJas) -- [Global Azure - Notes from the field: Policy-driven Governance](https://youtu.be/Ukqux_TN8uw) -- [Govern Azure Arc-enabled K8S Clusters with Azure Policy | KubeCon NA 2021](https://youtu.be/l1ve70xD06Y) -- [On Prem To The Cloud: Everything As Code](https://youtu.be/io_dX5I-6xM) -- [Performing Remediation on Resources with Azure Policy](https://www.youtube.com/watch?v=c1d05IYBrTk) -- [Using Management Group with Azure Policy](https://youtu.be/S_-JenO43G8) -- [What is Azure Policy](https://www.youtube.com/watch?v=obWeyLHWQIY) +- [Azure Governance & Deployments Quarterly Customer Panel December 2021](https://youtu.be/oYC5Ns7kLCY) - Governance, Deployments, Customer Panel +- [Azure Governance and Deployments Quarterly Customer Panel Feb 2021](https://www.youtube.com/watch?v=ONKn9XMPZCs) - Governance, Deployments, Customer Panel +- [Azure Governance and Deployments Quarterly Customer Panel May 2021](https://www.youtube.com/watch?v=tHyPDESIThk) - Governance, Deployments, Customer Panel +- [Azure Governance and the latest updates on Azure Policy](https://youtu.be/smyQv3MHe10) - Governance, Updates, Policy +- [Azure Governance for ISVs, Session 02: Policies, Initiatives, and Blueprints](https://youtu.be/SMvbFBdWi5U) - Governance, ISVs, Policies +- [Azure Policy and Kubernetes](https://youtu.be/Hv3K8zJSbow) - Policy, Kubernetes, Azure +- [Azure Policy on Azure Kubernetes Service](https://youtu.be/mfFdH7v3Vl8) - Policy, Kubernetes, Service +- [Azure Takeoff Show - Azure Policies and Locks](https://youtu.be/XqCcGZFbuCU?si=n9ma6cQpwNUO_CE7) - Policies, Locks, Azure +- [AzureFunBytes - Intro to Azure Policy](https://youtu.be/2ebTY4Bzah0) - Introduction, Policy, Azure +- [Compliance with Azure Policy](https://www.youtube.com/watch?v=OZh_4gjgvGU) - Compliance, Policy, Azure +- [Deep dive into Implementing governance at scale through Azure Policy](https://youtu.be/d6c1nfoySLI) - Governance, Scale, Policy +- [Enforcement with Azure Policy](https://www.youtube.com/watch?v=yQvFeuPoHe0) - Enforcement, Policy, Azure +- [Getting started with Azure Policy](https://www.youtube.com/watch?v=b0Sp6V0VJas) - Getting Started, Policy, Azure +- [Global Azure - Notes from the field: Policy-driven Governance](https://youtu.be/Ukqux_TN8uw) - Governance, Policy-driven, Field Notes +- [Govern Azure Arc-enabled K8S Clusters with Azure Policy | KubeCon NA 2021](https://youtu.be/l1ve70xD06Y) - Governance, Clusters, Policy +- [On Prem To The Cloud: Everything As Code](https://youtu.be/io_dX5I-6xM) - Cloud, Code, Everything +- [Performing Remediation on Resources with Azure Policy](https://www.youtube.com/watch?v=c1d05IYBrTk) - Remediation, Resources, Policy +- [Using Management Group with Azure Policy](https://youtu.be/S_-JenO43G8) - Management, Group, Policy +- [What is Azure Policy](https://www.youtube.com/watch?v=obWeyLHWQIY) - Introduction, Policy, Azure ### Microsoft Announcements and Articles -- [7 steps to author, develop, and deploy custom recommendations for Windows using Guest Configuration](https://techcommunity.microsoft.com/t5/microsoft-defender-for-cloud/7-steps-to-author-develop-and-deploy-custom-recommendations-for/ba-p/3166026?WT.mc_id=AZ-MVP-5004598) -- [Aligning CMMC Controls with your Azure Landing Zone](https://techcommunity.microsoft.com/t5/public-sector-blog/aligning-cmmc-controls-with-your-azure-landing-zone/ba-p/2736511?WT.mc_id=AZ-MVP-5004598) -- [Announcing Azure Resource Policy general availability](https://azure.microsoft.com/en-au/blog/azure-resource-policy-ga/?WT.mc_id=AZ-MVP-5004598) -- [Apply GitOps configurations on AKS as an Azure Arc Connected Cluster using Azure Policy for Kubernetes](https://azurearcjumpstart.io/azure_arc_jumpstart/azure_arc_k8s/day2/aks/aks_policy/?WT.mc_id=AZ-MVP-5004598) -- [Automation for Large Scale Deployment of Agents on Servers managed by Azure Arc](https://techcommunity.microsoft.com/t5/azure-arc-blog/automation-for-large-scale-deployment-of-agents-on-servers/ba-p/3713328?WT.mc_id=AZ-MVP-5004598) -- [Azure Backup Center - Backups and Good Governance](https://techcommunity.microsoft.com/t5/itops-talk-blog/azure-backup-center-backups-and-good-governance/ba-p/2318843?WT.mc_id=AZ-MVP-5004598) -- [Azure Custom Policy- PostgreSQL Product - Compliance Report not Available- New Feature Request](https://techcommunity.microsoft.com/t5/microsoft-developer-community/azure-custom-policy-postgresql-product-compliance-report-not/ba-p/4140715?WT.mc_id=AZ-MVP-5004598) -- [Azure Enterprise Policy as Code – A New Approach](https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/azure-enterprise-policy-as-code-a-new-approach/ba-p/3607843?WT.mc_id=AZ-MVP-5004598) -- [Azure Enterprise Policy as Code – Azure Landing Zones Integration](https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/azure-enterprise-policy-as-code-azure-landing-zones-integration/ba-p/3642784?WT.mc_id=AZ-MVP-5004598) -- [Azure Policy – Perform policy operations through Azure DevOps](https://techcommunity.microsoft.com/t5/azure-paas-blog/azure-policy-perform-policy-operations-through-azure-devops/ba-p/2045515?WT.mc_id=AZ-MVP-5004598) -- [Azure Policy Exemption Validation](https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/azure-policy-exemption-validation/ba-p/3859133?WT.mc_id=AZ-MVP-5004598) -- [Azure Policy for Kubernetes releases support for custom policy](https://techcommunity.microsoft.com/t5/azure-governance-and-management/azure-policy-for-kubernetes-releases-support-for-custom-policy/ba-p/2699466?WT.mc_id=AZ-MVP-5004598) -- [Azure Policy for Azure Container Apps? Yes, please](https://techcommunity.microsoft.com/t5/fasttrack-for-azure/azure-policy-for-azure-container-apps-yes-please/ba-p/3775200?WT.mc_id=AZ-MVP-5004598) -- [Azure Policy Guest Configuration – Using Tags for Configuration of Features](https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/azure-policy-guest-configuration-using-tags-for-configuration-of/ba-p/2836139?WT.mc_id=AZ-MVP-5004598) -- [Azure Policy glossary](https://docs.microsoft.com/en-us/azure/governance/policy/policy-glossary?WT.mc_id=AZ-MVP-5004598) -- [Azure Policy introduces user assigned MSI support, faster DINE deployment, and more!](https://techcommunity.microsoft.com/t5/azure-governance-and-management/azure-policy-introduces-user-assigned-msi-support-faster-dine/ba-p/2661073?WT.mc_id=AZ-MVP-5004598) -- [Azure Policy Remediation with Deployment Scripts](https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/azure-policy-remediation-with-deployment-scripts/ba-p/1594674?WT.mc_id=AZ-MVP-5004598) -- [Azure Policies for Automating Azure Governance - Choosing Policies](https://techcommunity.microsoft.com/t5/itops-talk-blog/azure-policies-for-automating-azure-governance-choosing-policies/ba-p/3709653?WT.mc_id=AZ-MVP-5004598) -- [Azure Policy Recommended Practices](https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/azure-policy-recommended-practices/bc-p/3879234?WT.mc_id=AZ-MVP-5004598) -- [Azure Unblogged - Azure Policy](https://techcommunity.microsoft.com/t5/itops-talk-blog/azure-unblogged-azure-policy/ba-p/2106247?WT.mc_id=AZ-MVP-5004598) -- [Centralized Policy Management in Microsoft Defender for Cloud using Management Groups](https://techcommunity.microsoft.com/t5/microsoft-defender-for-cloud/centralized-policy-management-in-microsoft-defender-for-cloud/ba-p/1276331?WT.mc_id=AZ-MVP-5004598) -- [Configure Security Center bundle pricing with Azure Policy](https://techcommunity.microsoft.com/t5/microsoft-defender-for-cloud/configure-security-center-bundle-pricing-with-azure-policy/ba-p/404035?WT.mc_id=AZ-MVP-5004598) -- [Continuously Export Microsoft Defender for Cloud Alerts and Recommendations via Policy](https://techcommunity.microsoft.com/t5/microsoft-defender-for-cloud/continuously-export-microsoft-defender-for-cloud-alerts-and/ba-p/1440745?WT.mc_id=AZ-MVP-5004598) -- [Controlling Release Pipelines with Gates and Azure Policy Compliance](https://devblogs.microsoft.com/devops/controlling-release-pipelines-with-gates-and-azure-policy-compliance/?WT.mc_id=AZ-MVP-5004598) -- [Cost Governance with Azure Policy](https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/cost-governance-with-azure-policy/ba-p/3791888?WT.mc_id=AZ-MVP-5004598) -- [Deploy Monitoring Agent Extension to Azure Arc Linux and Windows servers using Azure Policy](https://azurearcjumpstart.io/azure_arc_jumpstart/azure_arc_servers/day2/arc_policies_mma/?WT.mc_id=AZ-MVP-5004598) -- [Eliminate Password-Based Attacks on Azure Linux VMs](https://techcommunity.microsoft.com/t5/microsoft-defender-for-cloud/eliminate-password-based-attacks-on-azure-linux-vms/ba-p/2271139?WT.mc_id=AZ-MVP-5004598) -- [Enable HTTPS setting on Azure App service using Azure policy](https://techcommunity.microsoft.com/t5/azure-paas-blog/enable-https-setting-on-azure-app-service-using-azure-policy/ba-p/3286603?WT.mc_id=AZ-MVP-5004598) -- [Enforcing and Managing Azure DDoS Protection with Azure Policy](https://techcommunity.microsoft.com/t5/azure-network-security-blog/enforcing-and-managing-azure-ddos-protection-with-azure-policy/ba-p/3933172?WT.mc_id=AZ-MVP-5004598) -- [Enforcing Policy for Zero Trust with Azure Policy](https://devblogs.microsoft.com/azuregov/enforcing-policy-for-zero-trust-with-azure-policy-4-of-6/?WT.mc_id=AZ-MVP-5004598) -- [Enterprise-Scale and Azure Policy for policy-driven governance](https://techcommunity.microsoft.com/t5/azure-architecture-blog/enterprise-scale-and-azure-policy-for-policy-driven-governance/ba-p/1614060?WT.mc_id=AZ-MVP-5004598) -- [Field Notes: Remediating Resources Using User-Assigned Managed Identity with Azure Policy](https://techcommunity.microsoft.com/t5/security-compliance-and-identity/field-notes-remediating-resources-using-user-assigned-managed/ba-p/3258700?WT.mc_id=AZ-MVP-5004598) -- [GA: Policy add-on for Azure Kubernetes Service](https://azure.microsoft.com/en-au/updates/ga-policy-addon-for-azure-kubernetes-service/?WT.mc_id=AZ-MVP-5004598) -- [Generate Azure Policy Compliance Alerts By Sending Custom Data to Log Analytics](https://techcommunity.microsoft.com/t5/fasttrack-for-azure/generate-azure-policy-compliance-alerts-by-sending-custom-data/ba-p/3671119?WT.mc_id=AZ-MVP-5004598) -- [Generate Azure Policy Compliance Alerts By Sending Custom Data to Log Analytics - Part 2 - Automated](https://techcommunity.microsoft.com/t5/fasttrack-for-azure/generate-azure-policy-compliance-alerts-by-sending-custom-data/ba-p/4039114?WT.mc_id=AZ-MVP-5004598) -- [General availability: Built-in Azure Policy support for Network Watcher Traffic Analytics](https://azure.microsoft.com/en-gb/updates/general-availability-builtin-azure-policy-support-for-network-watcher-traffic-analytics/?WT.mc_id=AZ-MVP-5004598) -- [Generally available: Apply settings inside machines using Automanage machine configuration](https://techcommunity.microsoft.com/t5/azure-governance-and-management/generally-available-apply-settings-inside-machines-using/ba-p/3589614?WT.mc_id=AZ-MVP-5004598) -- [Generally available: Azure API Management - expanded support for Azure Policy definitions](https://azure.microsoft.com/en-us/updates/generally-available-azure-api-management-expanded-support-for-azure-policy-definitions/?WT.mc_id=AZ-MVP-5004598) -- [Generally available: Azure Policy support for Azure Site Recovery](https://azure.microsoft.com/en-gb/updates/asr-policy-support-ga/?WT.mc_id=AZ-MVP-5004598) -- [Guest configuration renames to machine configuration](https://techcommunity.microsoft.com/t5/azure-governance-and-management/coming-soon-guest-configuration-renames-to-machine-configuration/ba-p/3474116?WT.mc_id=AZ-MVP-5004598) -- [How Does Azure Policies In Enterprise-Scale Landing Zone Help?](https://techcommunity.microsoft.com/t5/azure-architecture-blog/how-does-azure-policies-in-enterprise-scale-landing-zone-help/ba-p/2121478?WT.mc_id=AZ-MVP-5004598) -- [How to build an audit Azure Policy with multiple parameters](https://techcommunity.microsoft.com/t5/itops-talk-blog/how-to-build-an-audit-azure-policy-with-multiple-parameters/ba-p/1866062?WT.mc_id=AZ-MVP-5004598) -- [How to debug unexpected Azure Policy compliance status for Azure resources?](https://techcommunity.microsoft.com/t5/azure-paas-blog/how-to-debug-unexpected-azure-policy-compliance-status-for-azure/ba-p/2111068?WT.mc_id=AZ-MVP-5004598) -- [How to Troubleshoot Deny Policy Step by Step](https://techcommunity.microsoft.com/t5/azure-paas-blog/how-to-troubleshoot-deny-policy-step-by-step/ba-p/3704375?WT.mc_id=AZ-MVP-5004598) -- [How to update Azure Policy parameters in Azure Blueprints](https://techcommunity.microsoft.com/t5/itops-talk-blog/how-to-update-azure-policy-parameters-in-azure-blueprints/ba-p/3037875?WT.mc_id=AZ-MVP-5004598) -- [How to use PowerShell & Azure Policy to check settings inside a VM](https://techcommunity.microsoft.com/t5/itops-talk-blog/how-to-use-powershell-amp-azure-policy-to-check-settings-inside/ba-p/749241?WT.mc_id=AZ-MVP-5004598) -- [Implementing Azure Policy using Terraform](https://techcommunity.microsoft.com/t5/azure-paas-blog/implementing-azure-policy-using-terraform/ba-p/1423775?WT.mc_id=AZ-MVP-5004598) -- [Important change released for Guest Configuration audit policies](https://techcommunity.microsoft.com/t5/azure-governance-and-management/important-change-released-for-guest-configuration-audit-policies/ba-p/1655316?WT.mc_id=AZ-MVP-5004598) -- [Infrastructure as Code Testing with Azure Policy](https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/infrastructure-as-code-testing-with-azure-policy/ba-p/3921765?WT.mc_id=AZ-MVP-5004598) -- [Managing Security Center at scale using ARM templates and Azure Policy](https://techcommunity.microsoft.com/t5/microsoft-defender-for-cloud/managing-security-center-at-scale-using-arm-templates-and-azure/ba-p/327761?WT.mc_id=AZ-MVP-5004598) -- [Microsoft cloud security benchmark: Azure compute benchmark is now aligned with CIS!](https://techcommunity.microsoft.com/t5/microsoft-defender-for-cloud/microsoft-cloud-security-benchmark-azure-compute-benchmark-is/ba-p/3680141?WT.mc_id=AZ-MVP-5004598) -- [Monitoring Azure Policy compliance across your Azure Managed Application deployments](https://techcommunity.microsoft.com/t5/apps-on-azure-blog/monitoring-azure-policy-compliance-across-your-azure-managed/ba-p/3922113?WT.mc_id=AZ-MVP-5004598) -- [More resource policy aliases](https://azure.microsoft.com/en-au/blog/more-resource-policy-aliases/?WT.mc_id=AZ-MVP-5004598) -- [New and updated regulatory compliance policy initiatives for NIST, FedRAMP, DoD in Azure, Azure Government](https://devblogs.microsoft.com/azuregov/new-and-updated-regulatory-compliance-policy-initiatives-for-nist-fedramp-dod-in-azure-azure-government/?WT.mc_id=AZ-MVP-5004598) -- [New feature: easily assign regulatory compliance policies to your Azure Landing Zone](https://techcommunity.microsoft.com/t5/azure-architecture-blog/new-feature-easily-assign-regulatory-compliance-policies-to-your/ba-p/4074957?WT.mc_id=AZ-MVP-5004598) -- [On Prem To the Cloud: Everything As Code](https://devblogs.microsoft.com/devops/on-prem-to-the-cloud-everything-as-code-ep-4/?WT.mc_id=AZ-MVP-5004598) -- [OPS114: Governing baselines in hybrid server environments using Azure Policy Guest Configuration](https://techcommunity.microsoft.com/t5/itops-talk-blog/ops114-governing-baselines-in-hybrid-server-environments-using/ba-p/2109245?WT.mc_id=AZ-MVP-5004598) -- [Policy Distribution Dashboard for Microsoft Defender for Cloud](https://techcommunity.microsoft.com/t5/microsoft-defender-for-cloud/policy-distribution-dashboard-for-microsoft-defender-for-cloud/ba-p/3264712?WT.mc_id=AZ-MVP-5004598) -- [Portal Preview of Azure Resource Policy](https://azure.microsoft.com/en-au/blog/portal-preview-of-azure-resource-policy-2/?WT.mc_id=AZ-MVP-5004598) -- [Public preview of new Azure Policy features](https://azure.microsoft.com/en-au/blog/recap-on-new-azure-policy-features-in-ignite/?WT.mc_id=AZ-MVP-5004598) -- [Remediate your Azure Kubernetes Service clusters at scale using Azure Policy's mutation support!](https://techcommunity.microsoft.com/t5/azure-governance-and-management/remediate-your-azure-kubernetes-service-clusters-at-scale-using/ba-p/3974506?WT.mc_id=AZ-MVP-5004598) -- [Software Installation Using Azure Policy State Change Events](https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/software-installation-using-azure-policy-state-change-events/ba-p/2420515?WT.mc_id=AZ-MVP-5004598) -- [Software Installation Using Machine Configuration and Azure Policy](https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/software-installation-using-machine-configuration-and-azure/ba-p/3695636?WT.mc_id=AZ-MVP-5004598) -- [The impact of conflicting Azure Policies](https://techcommunity.microsoft.com/t5/itops-talk-blog/the-impact-of-conflicting-azure-policies/ba-p/2227063?WT.mc_id=AZ-MVP-5004598) -- [Trigger Condition and Evaluation Workflow of Azure Policy](https://techcommunity.microsoft.com/t5/azure-paas-blog/trigger-condition-and-evaluation-workflow-of-azure-policy/ba-p/3436597?WT.mc_id=AZ-MVP-5004598) -- [Use Azure Policy on an Azure-Arc enabled Kubernetes cluster for applying ingress/egress rules with Calico network policy](https://azurearcjumpstart.io/azure_arc_jumpstart/azure_arc_k8s/day2/multi_distributions/calico/?WT.mc_id=AZ-MVP-5004598) -- [Use PowerShell to Remediate Non-Compliant Policy Definitions](https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/use-powershell-to-remediate-non-compliant-policy-definitions/ba-p/3878321?WT.mc_id=AZ-MVP-5004598) -- [Using Azure Policy to onboard multiple SQL Servers at scale to Azure Arc-enabled SQL Server - Part 1](https://techcommunity.microsoft.com/t5/azure-arc-blog/using-azure-policy-to-onboard-multiple-sql-servers-at-scale-to/ba-p/3788886?WT.mc_id=AZ-MVP-5004598) -- [Using GitHub for Azure Policy as Code](https://techcommunity.microsoft.com/t5/azure-governance-and-management/using-github-for-azure-policy-as-code/ba-p/1886464?WT.mc_id=AZ-MVP-5004598) -- [What's the difference between Group Policy and Azure Policy?](https://techcommunity.microsoft.com/t5/itops-talk-blog/what-s-the-difference-between-group-policy-and-azure-policy/ba-p/1016312?WT.mc_id=AZ-MVP-5004598) -- [What’s new across Azure Governance services, Microsoft Build 2024](https://techcommunity.microsoft.com/t5/azure-governance-and-management/what-s-new-across-azure-governance-services-microsoft-build-2024/ba-p/4150428?WT.mc_id=AZ-MVP-5004598) +- [7 steps to author, develop, and deploy custom recommendations for Windows using Guest Configuration](https://techcommunity.microsoft.com/t5/microsoft-defender-for-cloud/7-steps-to-author-develop-and-deploy-custom-recommendations-for/ba-p/3166026?WT.mc_id=AZ-MVP-5004598) - Custom Recommendations, Windows, Guest Configuration +- [Aligning CMMC Controls with your Azure Landing Zone](https://techcommunity.microsoft.com/t5/public-sector-blog/aligning-cmmc-controls-with-your-azure-landing-zone/ba-p/2736511?WT.mc_id=AZ-MVP-5004598) - CMMC Controls, Landing Zone, Alignment +- [Announcing Azure Resource Policy general availability](https://azure.microsoft.com/en-au/blog/azure-resource-policy-ga/?WT.mc_id=AZ-MVP-5004598) - Resource Policy, General Availability, Announcement +- [Apply GitOps configurations on AKS as an Azure Arc Connected Cluster using Azure Policy for Kubernetes](https://azurearcjumpstart.io/azure_arc_jumpstart/azure_arc_k8s/day2/aks/aks_policy/?WT.mc_id=AZ-MVP-5004598) - GitOps, Configurations, Kubernetes +- [Automation for Large Scale Deployment of Agents on Servers managed by Azure Arc](https://techcommunity.microsoft.com/t5/azure-arc-blog/automation-for-large-scale-deployment-of-agents-on-servers/ba-p/3713328?WT.mc_id=AZ-MVP-5004598) - Automation, Large Scale, Deployment +- [Azure Backup Center - Backups and Good Governance](https://techcommunity.microsoft.com/t5/itops-talk-blog/azure-backup-center-backups-and-good-governance/ba-p/2318843?WT.mc_id=AZ-MVP-5004598) - Backup, Governance, Center +- [Azure Custom Policy- PostgreSQL Product - Compliance Report not Available- New Feature Request](https://techcommunity.microsoft.com/t5/microsoft-developer-community/azure-custom-policy-postgresql-product-compliance-report-not/ba-p/4140715?WT.mc_id=AZ-MVP-5004598) - Custom Policy, PostgreSQL, Compliance +- [Azure Enterprise Policy as Code – A New Approach](https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/azure-enterprise-policy-as-code-a-new-approach/ba-p/3607843?WT.mc_id=AZ-MVP-5004598) - Enterprise Policy, Code, Approach +- [Azure Enterprise Policy as Code – Azure Landing Zones Integration](https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/azure-enterprise-policy-as-code-azure-landing-zones-integration/ba-p/3642784?WT.mc_id=AZ-MVP-5004598) - Enterprise Policy, Code, Integration +- [Azure Policy – Perform policy operations through Azure DevOps](https://techcommunity.microsoft.com/t5/azure-paas-blog/azure-policy-perform-policy-operations-through-azure-devops/ba-p/2045515?WT.mc_id=AZ-MVP-5004598) - Policy Operations, DevOps, Azure +- [Azure Policy Exemption Validation](https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/azure-policy-exemption-validation/ba-p/3859133?WT.mc_id=AZ-MVP-5004598) - Policy Exemption, Validation, Azure +- [Azure Policy for Kubernetes releases support for custom policy](https://techcommunity.microsoft.com/t5/azure-governance-and-management/azure-policy-for-kubernetes-releases-support-for-custom-policy/ba-p/2699466?WT.mc_id=AZ-MVP-5004598) - Kubernetes, Custom Policy, Support +- [Azure Policy for Azure Container Apps? Yes, please](https://techcommunity.microsoft.com/t5/fasttrack-for-azure/azure-policy-for-azure-container-apps-yes-please/ba-p/3775200?WT.mc_id=AZ-MVP-5004598) - Container Apps, Policy, Azure +- [Azure Policy Guest Configuration – Using Tags for Configuration of Features](https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/azure-policy-guest-configuration-using-tags-for-configuration-of/ba-p/2836139?WT.mc_id=AZ-MVP-5004598) - Guest Configuration, Tags, Features +- [Azure Policy glossary](https://docs.microsoft.com/en-us/azure/governance/policy/policy-glossary?WT.mc_id=AZ-MVP-5004598) - Glossary, Policy, Azure +- [Azure Policy introduces user assigned MSI support, faster DINE deployment, and more!](https://techcommunity.microsoft.com/t5/azure-governance-and-management/azure-policy-introduces-user-assigned-msi-support-faster-dine/ba-p/2661073?WT.mc_id=AZ-MVP-5004598) - MSI Support, DINE Deployment, Policy +- [Azure Policy Remediation with Deployment Scripts](https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/azure-policy-remediation-with-deployment-scripts/ba-p/1594674?WT.mc_id=AZ-MVP-5004598) - Remediation, Deployment Scripts, Policy +- [Azure Policies for Automating Azure Governance - Choosing Policies](https://techcommunity.microsoft.com/t5/itops-talk-blog/azure-policies-for-automating-azure-governance-choosing-policies/ba-p/3709653?WT.mc_id=AZ-MVP-5004598) - Automating Governance, Choosing Policies, Azure +- [Azure Policy Recommended Practices](https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/azure-policy-recommended-practices/bc-p/3879234?WT.mc_id=AZ-MVP-5004598) - Recommended Practices, Policy, Azure +- [Azure Unblogged - Azure Policy](https://techcommunity.microsoft.com/t5/itops-talk-blog/azure-unblogged-azure-policy/ba-p/2106247?WT.mc_id=AZ-MVP-5004598) - Unblogged, Policy, Azure +- [Centralized Policy Management in Microsoft Defender for Cloud using Management Groups](https://techcommunity.microsoft.com/t5/microsoft-defender-for-cloud/centralized-policy-management-in-microsoft-defender-for-cloud/ba-p/1276331?WT.mc_id=AZ-MVP-5004598) - Policy Management, Defender for Cloud, Management Groups +- [Configure Security Center bundle pricing with Azure Policy](https://techcommunity.microsoft.com/t5/microsoft-defender-for-cloud/configure-security-center-bundle-pricing-with-azure-policy/ba-p/404035?WT.mc_id=AZ-MVP-5004598) - Security Center, Bundle Pricing, Policy +- [Continuously Export Microsoft Defender for Cloud Alerts and Recommendations via Policy](https://techcommunity.microsoft.com/t5/microsoft-defender-for-cloud/continuously-export-microsoft-defender-for-cloud-alerts-and/ba-p/1440745?WT.mc_id=AZ-MVP-5004598) - Defender for Cloud, Alerts, Recommendations +- [Controlling Release Pipelines with Gates and Azure Policy Compliance](https://devblogs.microsoft.com/devops/controlling-release-pipelines-with-gates-and-azure-policy-compliance/?WT.mc_id=AZ-MVP-5004598) - Release Pipelines, Gates, Compliance +- [Cost Governance with Azure Policy](https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/cost-governance-with-azure-policy/ba-p/3791888?WT.mc_id=AZ-MVP-5004598) - Cost Governance, Policy, Azure +- [Deploy Monitoring Agent Extension to Azure Arc Linux and Windows servers using Azure Policy](https://azurearcjumpstart.io/azure_arc_jumpstart/azure_arc_servers/day2/arc_policies_mma/?WT.mc_id=AZ-MVP-5004598) - Monitoring Agent, Extension, Policy +- [Eliminate Password-Based Attacks on Azure Linux VMs](https://techcommunity.microsoft.com/t5/microsoft-defender-for-cloud/eliminate-password-based-attacks-on-azure-linux-vms/ba-p/2271139?WT.mc_id=AZ-MVP-5004598) - Password-Based Attacks, Linux VMs, Elimination +- [Enable HTTPS setting on Azure App service using Azure policy](https://techcommunity.microsoft.com/t5/azure-paas-blog/enable-https-setting-on-azure-app-service-using-azure-policy/ba-p/3286603?WT.mc_id=AZ-MVP-5004598) - HTTPS, App Service, Policy +- [Enforcing and Managing Azure DDoS Protection with Azure Policy](https://techcommunity.microsoft.com/t5/azure-network-security-blog/enforcing-and-managing-azure-ddos-protection-with-azure-policy/ba-p/3933172?WT.mc_id=AZ-MVP-5004598) - DDoS Protection, Management, Policy +- [Enforcing Policy for Zero Trust with Azure Policy](https://devblogs.microsoft.com/azuregov/enforcing-policy-for-zero-trust-with-azure-policy-4-of-6/?WT.mc_id=AZ-MVP-5004598) - Zero Trust, Enforcement, Policy +- [Enterprise-Scale and Azure Policy for policy-driven governance](https://techcommunity.microsoft.com/t5/azure-architecture-blog/enterprise-scale-and-azure-policy-for-policy-driven-governance/ba-p/1614060?WT.mc_id=AZ-MVP-5004598) - Enterprise-Scale, Policy-driven, Governance +- [Field Notes: Remediating Resources Using User-Assigned Managed Identity with Azure Policy](https://techcommunity.microsoft.com/t5/security-compliance-and-identity/field-notes-remediating-resources-using-user-assigned-managed/ba-p/3258700?WT.mc_id=AZ-MVP-5004598) - Remediation, Resources, Managed Identity +- [GA: Policy add-on for Azure Kubernetes Service](https://azure.microsoft.com/en-au/updates/ga-policy-addon-for-azure-kubernetes-service/?WT.mc_id=AZ-MVP-5004598) - Policy Add-on, Kubernetes, Service +- [Generate Azure Policy Compliance Alerts By Sending Custom Data to Log Analytics](https://techcommunity.microsoft.com/t5/fasttrack-for-azure/generate-azure-policy-compliance-alerts-by-sending-custom-data/ba-p/3671119?WT.mc_id=AZ-MVP-5004598) - Compliance Alerts, Custom Data, Log Analytics +- [Generate Azure Policy Compliance Alerts By Sending Custom Data to Log Analytics - Part 2 - Automated](https://techcommunity.microsoft.com/t5/fasttrack-for-azure/generate-azure-policy-compliance-alerts-by-sending-custom-data/ba-p/4039114?WT.mc_id=AZ-MVP-5004598) - Compliance Alerts, Custom Data, Log Analytics +- [General availability: Built-in Azure Policy support for Network Watcher Traffic Analytics](https://azure.microsoft.com/en-gb/updates/general-availability-builtin-azure-policy-support-for-network-watcher-traffic-analytics/?WT.mc_id=AZ-MVP-5004598) - Traffic Analytics, Network Watcher, Policy +- [Generally available: Apply settings inside machines using Automanage machine configuration](https://techcommunity.microsoft.com/t5/azure-governance-and-management/generally-available-apply-settings-inside-machines-using/ba-p/3589614?WT.mc_id=AZ-MVP-5004598) - Automanage, Machine Configuration, Settings +- [Generally available: Azure API Management - expanded support for Azure Policy definitions](https://azure.microsoft.com/en-us/updates/generally-available-azure-api-management-expanded-support-for-azure-policy-definitions/?WT.mc_id=AZ-MVP-5004598) - API Management, Policy Definitions, Support +- [Generally available: Azure Policy support for Azure Site Recovery](https://azure.microsoft.com/en-gb/updates/asr-policy-support-ga/?WT.mc_id=AZ-MVP-5004598) - Site Recovery, Policy Support, Availability +- [Guest configuration renames to machine configuration](https://techcommunity.microsoft.com/t5/azure-governance-and-management/coming-soon-guest-configuration-renames-to-machine-configuration/ba-p/3474116?WT.mc_id=AZ-MVP-5004598) - Guest Configuration, Machine Configuration, Renaming +- [How Does Azure Policies In Enterprise-Scale Landing Zone Help?](https://techcommunity.microsoft.com/t5/azure-architecture-blog/how-does-azure-policies-in-enterprise-scale-landing-zone-help/ba-p/2121478?WT.mc_id=AZ-MVP-5004598) - Enterprise-Scale, Landing Zone, Policies +- [How to build an audit Azure Policy with multiple parameters](https://techcommunity.microsoft.com/t5/itops-talk-blog/how-to-build-an-audit-azure-policy-with-multiple-parameters/ba-p/1866062?WT.mc_id=AZ-MVP-5004598) - Audit, Policy, Parameters +- [How to debug unexpected Azure Policy compliance status for Azure resources?](https://techcommunity.microsoft.com/t5/azure-paas-blog/how-to-debug-unexpected-azure-policy-compliance-status-for-azure/ba-p/2111068?WT.mc_id=AZ-MVP-5004598) - Debugging, Compliance Status, Resources +- [How to Troubleshoot Deny Policy Step by Step](https://techcommunity.microsoft.com/t5/azure-paas-blog/how-to-troubleshoot-deny-policy-step-by-step/ba-p/3704375?WT.mc_id=AZ-MVP-5004598) - Troubleshooting, Deny Policy, Step by Step +- [How to update Azure Policy parameters in Azure Blueprints](https://techcommunity.microsoft.com/t5/itops-talk-blog/how-to-update-azure-policy-parameters-in-azure-blueprints/ba-p/3037875?WT.mc_id=AZ-MVP-5004598) - Policy Parameters, Blueprints, Update +- [How to use PowerShell & Azure Policy to check settings inside a VM](https://techcommunity.microsoft.com/t5/itops-talk-blog/how-to-use-powershell-amp-azure-policy-to-check-settings-inside/ba-p/749241?WT.mc_id=AZ-MVP-5004598) - PowerShell, Policy, VM Settings +- [Implementing Azure Policy using Terraform](https://techcommunity.microsoft.com/t5/azure-paas-blog/implementing-azure-policy-using-terraform/ba-p/1423775?WT.mc_id=AZ-MVP-5004598) - Implementation, Policy, Terraform +- [Important change released for Guest Configuration audit policies](https://techcommunity.microsoft.com/t5/azure-governance-and-management/important-change-released-for-guest-configuration-audit-policies/ba-p/1655316?WT.mc_id=AZ-MVP-5004598) - Guest Configuration, Audit Policies, Change +- [Infrastructure as Code Testing with Azure Policy](https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/infrastructure-as-code-testing-with-azure-policy/ba-p/3921765?WT.mc_id=AZ-MVP-5004598) - Infrastructure as Code, Testing, Policy +- [Managing Security Center at scale using ARM templates and Azure Policy](https://techcommunity.microsoft.com/t5/microsoft-defender-for-cloud/managing-security-center-at-scale-using-arm-templates-and-azure/ba-p/327761?WT.mc_id=AZ-MVP-5004598) - Security Center, ARM Templates, Policy +- [Microsoft cloud security benchmark: Azure compute benchmark is now aligned with CIS!](https://techcommunity.microsoft.com/t5/microsoft-defender-for-cloud/microsoft-cloud-security-benchmark-azure-compute-benchmark-is/ba-p/3680141?WT.mc_id=AZ-MVP-5004598) - Cloud Security, Compute Benchmark, CIS +- [Monitoring Azure Policy compliance across your Azure Managed Application deployments](https://techcommunity.microsoft.com/t5/apps-on-azure-blog/monitoring-azure-policy-compliance-across-your-azure-managed/ba-p/3922113?WT.mc_id=AZ-MVP-5004598) - Compliance Monitoring, Managed Application, Deployments +- [More resource policy aliases](https://azure.microsoft.com/en-au/blog/more-resource-policy-aliases/?WT.mc_id=AZ-MVP-5004598) - Resource Policy, Aliases, More +- [New and updated regulatory compliance policy initiatives for NIST, FedRAMP, DoD in Azure, Azure Government](https://devblogs.microsoft.com/azuregov/new-and-updated-regulatory-compliance-policy-initiatives-for-nist-fedramp-dod-in-azure-azure-government/?WT.mc_id=AZ-MVP-5004598) - Regulatory Compliance, Policy Initiatives, NIST +- [New feature: easily assign regulatory compliance policies to your Azure Landing Zone](https://techcommunity.microsoft.com/t5/azure-architecture-blog/new-feature-easily-assign-regulatory-compliance-policies-to-your/ba-p/4074957?WT.mc_id=AZ-MVP-5004598) - Regulatory Compliance, Policies, Landing Zone +- [On Prem To the Cloud: Everything As Code](https://devblogs.microsoft.com/devops/on-prem-to-the-cloud-everything-as-code-ep-4/?WT.mc_id=AZ-MVP-5004598) - Cloud, Code, Everything +- [OPS114: Governing baselines in hybrid server environments using Azure Policy Guest Configuration](https://techcommunity.microsoft.com/t5/itops-talk-blog/ops114-governing-baselines-in-hybrid-server-environments-using/ba-p/2109245?WT.mc_id=AZ-MVP-5004598) - Baselines, Hybrid Server, Guest Configuration +- [Policy Distribution Dashboard for Microsoft Defender for Cloud](https://techcommunity.microsoft.com/t5/microsoft-defender-for-cloud/policy-distribution-dashboard-for-microsoft-defender-for-cloud/ba-p/3264712?WT.mc_id=AZ-MVP-5004598) - Policy Distribution, Dashboard, Defender for Cloud +- [Portal Preview of Azure Resource Policy](https://azure.microsoft.com/en-au/blog/portal-preview-of-azure-resource-policy-2/?WT.mc_id=AZ-MVP-5004598) - Resource Policy, Portal Preview, Azure +- [Public preview of new Azure Policy features](https://azure.microsoft.com/en-au/blog/recap-on-new-azure-policy-features-in-ignite/?WT.mc_id=AZ-MVP-5004598) - Policy Features, Public Preview, Azure +- [Remediate your Azure Kubernetes Service clusters at scale using Azure Policy's mutation support!](https://techcommunity.microsoft.com/t5/azure-governance-and-management/remediate-your-azure-kubernetes-service-clusters-at-scale-using/ba-p/3974506?WT.mc_id=AZ-MVP-5004598) - Remediation, Kubernetes, Mutation Support +- [Software Installation Using Azure Policy State Change Events](https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/software-installation-using-azure-policy-state-change-events/ba-p/2420515?WT.mc_id=AZ-MVP-5004598) - Software Installation, State Change Events, Policy +- [Software Installation Using Machine Configuration and Azure Policy](https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/software-installation-using-machine-configuration-and-azure/ba-p/3695636?WT.mc_id=AZ-MVP-5004598) - Software Installation, Machine Configuration, Policy +- [The impact of conflicting Azure Policies](https://techcommunity.microsoft.com/t5/itops-talk-blog/the-impact-of-conflicting-azure-policies/ba-p/2227063?WT.mc_id=AZ-MVP-5004598) - Conflicting Policies, Impact, Azure +- [Trigger Condition and Evaluation Workflow of Azure Policy](https://techcommunity.microsoft.com/t5/azure-paas-blog/trigger-condition-and-evaluation-workflow-of-azure-policy/ba-p/3436597?WT.mc_id=AZ-MVP-5004598) - Trigger Condition, Evaluation Workflow, Policy +- [Use Azure Policy on an Azure-Arc enabled Kubernetes cluster for applying ingress/egress rules with Calico network policy](https://azurearcjumpstart.io/azure_arc_jumpstart/azure_arc_k8s/day2/multi_distributions/calico/?WT.mc_id=AZ-MVP-5004598) - Kubernetes, Ingress/Egress Rules, Calico Network Policy +- [Use PowerShell to Remediate Non-Compliant Policy Definitions](https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/use-powershell-to-remediate-non-compliant-policy-definitions/ba-p/3878321?WT.mc_id=AZ-MVP-5004598) - Remediation, Non-Compliant Policy, PowerShell +- [Using Azure Policy to onboard multiple SQL Servers at scale to Azure Arc-enabled SQL Server - Part 1](https://techcommunity.microsoft.com/t5/azure-arc-blog/using-azure-policy-to-onboard-multiple-sql-servers-at-scale-to/ba-p/3788886?WT.mc_id=AZ-MVP-5004598) - Onboarding, SQL Servers, Policy +- [Using GitHub for Azure Policy as Code](https://techcommunity.microsoft.com/t5/azure-governance-and-management/using-github-for-azure-policy-as-code/ba-p/1886464?WT.mc_id=AZ-MVP-5004598) - GitHub, Policy as Code, Azure +- [What's the difference between Group Policy and Azure Policy?](https://techcommunity.microsoft.com/t5/itops-talk-blog/what-s-the-difference-between-group-policy-and-azure-policy/ba-p/1016312?WT.mc_id=AZ-MVP-5004598) - Group Policy, Azure Policy, Differences +- [What’s new across Azure Governance services, Microsoft Build 2024](https://techcommunity.microsoft.com/t5/azure-governance-and-management/what-s-new-across-azure-governance-services-microsoft-build-2024/ba-p/4150428?WT.mc_id=AZ-MVP-5004598) - Governance Services, Updates, Microsoft Build ### Microsoft Repositories and Tools -- [azure cyber security maturity model (CMMC) policy mapping](https://aka.ms/cmmc/alzmap) -- [azure policy visual studio code extension](https://marketplace.visualstudio.com/items?itemname=azurepolicy.azurepolicyextension) -- [azure/azure-policy](https://github.com/azure/azure-policy) -- [azure/community-policy](https://github.com/azure/community-policy) -- [azure/enterprise-azure-policy-as-code](https://github.com/azure/enterprise-azure-policy-as-code) -- [azure/manage-azure-policy](https://github.com/azure/manage-azure-policy) -- [azure/policy-compliance-scan](https://github.com/azure/policy-compliance-scan) -- [azure/regulatory-compliance-initiatives](https://github.com/Azure/regulatory-compliance-initiatives) -- [azure-samples/aca-azure-policy](https://github.com/Azure-Samples/aca-azure-policy) -- [microsoft/azurepolicytestframework](https://github.com/microsoft/AzurePolicyTestFramework) +- [azure cyber security maturity model (CMMC) policy mapping](https://aka.ms/cmmc/alzmap) - Cyber Security, Maturity Model, Policy Mapping +- [azure policy visual studio code extension](https://marketplace.visualstudio.com/items?itemname=azurepolicy.azurepolicyextension) - Visual Studio Code, Extension, Policy +- [azure/azure-policy](https://github.com/azure/azure-policy) - Policy, Azure, Repository +- [azure/community-policy](https://github.com/azure/community-policy) - Community, Policy, Repository +- [azure/enterprise-azure-policy-as-code](https://github.com/azure/enterprise-azure-policy-as-code) - Enterprise, Policy as Code, Repository +- [azure/manage-azure-policy](https://github.com/azure/manage-azure-policy) - Management, Policy, Repository +- [azure/policy-compliance-scan](https://github.com/azure/policy-compliance-scan) - Compliance, Policy, Scan +- [azure/regulatory-compliance-initiatives](https://github.com/Azure/regulatory-compliance-initiatives) - Regulatory Compliance, Initiatives, Repository +- [azure-samples/aca-azure-policy](https://github.com/Azure-Samples/aca-azure-policy) - Samples, Policy, Repository +- [microsoft/azurepolicytestframework](https://github.com/microsoft/AzurePolicyTestFramework) - Test Framework, Policy, Repository ### Microsoft Forums and Feedback -- [Azure Governance Ideas](https://feedback.azure.com/d365community/forum/675ae472-f324-ec11-b6e6-000d3a4f0da0) -- [Microsoft Q&A for Azure Policy](https://docs.microsoft.com/en-us/answers/topics/azure-policy.html) +- [Azure Governance Ideas](https://feedback.azure.com/d365community/forum/675ae472-f324-ec11-b6e6-000d3a4f0da0) - Governance, Ideas, Forum +- [Microsoft Q&A for Azure Policy](https://docs.microsoft.com/en-us/answers/topics/azure-policy.html) - Q&A, Policy, Forum ### Community Videos -- [A summary of the Diagnostic Settings](https://www.youtube.com/watch?v=zAxvFH9EsGY) -- [Admission Control on AKS with Azure Policy](https://youtu.be/OJGmwCMsUNE) -- [Anatomy of Azure Policy](https://youtu.be/4wGns611G4w) -- [Authoring Custom Azure Policy Definitions](https://youtu.be/qygOCyambK4) -- [Automatically Tag Azure Resources using Azure Policy](https://youtu.be/PUJe8Od7B9Q) -- [Automating Infrastructure Governance with Azure Policy](https://youtu.be/dPwy8nlNyNM?t=570) -- [AZ-900 Episode 31 | Azure Policy](https://youtu.be/9WO4EBgUJXk) -- [Azure Back To School: Bicep Builders: Azure Sentinel and Policy as Code](https://youtu.be/B03V3Tazcec) -- [Azure Governance - #3 - Policy & Blueprints](https://youtu.be/EwO25vecGUo) -- [Azure Governance And Security | Secure Azure Key Vault Using Azure Policy](https://youtu.be/o4EfqtlVyR4) -- [Azure Key Vault RBAC and Policy Deep Dive](https://youtu.be/oYzFWOrZMKc) -- [Azure Policy - Non-Compliance Messages](https://youtu.be/N4Xom4IYcUE) -- [Azure Policy as Code - Zero to Hero in 60 minutes](https://youtu.be/AVn5glYBz84?t=2380) -- [Azure Policy Remediation Deep Dive](https://youtu.be/fhIn_kHz4hk) -- [Azure Policy](https://youtu.be/1NzWYIsKUl4) -- [Azure Spring Clean: Some points to remember about Azure Governance](https://youtu.be/lOHK_k6w4e4) -- [Azure Update Manager with Azure Policies](https://www.youtube.com/watch?v=Da1EsoAzUoY) -- [Block Deletes Using the New DenyAction Azure Policy Effect](https://youtu.be/ZVshBqY8kts) -- [Build Your Tagging Strategy with Azure Policy and Automation](https://youtu.be/4ebXt0iMiEU) -- [Custom Policy for Azure Governance - How to create custom Azure Policy from Scratch](https://youtu.be/n-jL_xe9858) -- [Detailed look at Azure Policy Exemption Permission Requirements](https://youtu.be/clAu7VqpacA) -- [DevOps | Azure Policy Tutorial | Terraform | GitHub | Compliance enforcement in Azure Subscription](https://youtu.be/MQ3X7qDCddU?si=kSuv2U6Rcj791aNw) -- [Festive Tech Calendar: Day 1 - Azure Governance](https://youtu.be/GK_8FAHwoe8) -- [Festive Tech Calendar: Day 6 - Azure Governance: Azure customized Policies](https://www.youtube.com/watch?v=rQXZWIvW1Ww) -- [Flexing Your Security Governance with Azure Policy As Code](https://youtu.be/-KSLh2I9e1U) -- [Functionality and Usage of Azure Policy - AZ-900 Certification Course](https://youtu.be/z7WMqHE3R8g?si=Zp7bpzNSzD-wBewt) -- [Get Visibility Into Your Environment With Azure Governance Visualizer](https://youtu.be/hZXvF5oypLE) -- [Getting to Green with Azure Policy](https://youtu.be/P3PRXf-IilI?si=HWAq3sWCjpB7TpDn) -- [GitOps with Azure Arc Kubernetes via Azure Policy](https://youtu.be/AE5Io3qtABs) -- [Global Azure: Policy as Code with Bicep for Enterprise Scale](https://youtu.be/qpnMJXw6pIg) -- [Help Everyone Follow The Rules | Azure Policy](https://youtu.be/7xhcnxRrXYQ?si=SvyB8WczZhLjxeLD) -- [How to enforce Azure Naming Convention Using Azure Policies](https://youtu.be/eqNIV9QKflg?si=VG2KDsFagFKctbDD) -- [If Only I Knew THIS About Azure 5 Years Ago](https://youtu.be/DxwKYvcMud4?si=jLk8b4EmtlzUVcDB) -- [Inside Azure Governance - You in Control](https://www.youtube.com/watch?v=CHFLgfELV1E) -- [Livestream: A Gentle Introduction to Azure Policy](https://www.youtube.com/live/AwI9Z_7E7eA?si=1jSWP9CxsyFwD54G) -- [Microsoft Azure Master Class Part 3 - Governance](https://youtu.be/cIh_Nfl67T0?t=2830) -- [Organizational Governance and Best Practices for Control](https://www.youtube.com/watch?v=utVRZg0TNu8) -- [Regain Control with Azure Governance](https://www.youtube.com/watch?v=M2y0QsHLeSs) -- [Understanding Organizational Governance and Best Practices for Control](https://youtu.be/utVRZg0TNu8) -- [Using Azure Security Center for Policy and Regulatory Compliance](https://youtu.be/AXgBoSz0dAs) -- [Virtual Machine Scale Sets Logs With An Azure Policy](https://youtu.be/wT0-BA5MrZ8) -- [Writing DSC Resources for Azure Policy Guest Configuration - For Linux](https://youtu.be/RxnxpZqvEmg) +- [A summary of the Diagnostic Settings](https://www.youtube.com/watch?v=zAxvFH9EsGY) - Diagnostic Settings, Summary, Azure +- [Admission Control on AKS with Azure Policy](https://youtu.be/OJGmwCMsUNE) - Admission Control, AKS, Policy +- [Anatomy of Azure Policy](https://youtu.be/4wGns611G4w) - Anatomy, Policy, Azure +- [Authoring Custom Azure Policy Definitions](https://youtu.be/qygOCyambK4) - Custom Policy, Definitions, Authoring +- [Automatically Tag Azure Resources using Azure Policy](https://youtu.be/PUJe8Od7B9Q) - Tagging, Resources, Policy +- [Automating Infrastructure Governance with Azure Policy](https://youtu.be/dPwy8nlNyNM?t=570) - Automation, Infrastructure, Governance +- [AZ-900 Episode 31 | Azure Policy](https://youtu.be/9WO4EBgUJXk) - AZ-900, Policy, Azure +- [Azure Back To School: Bicep Builders: Azure Sentinel and Policy as Code](https://youtu.be/B03V3Tazcec) - Bicep Builders, Sentinel, Policy as Code +- [Azure Governance - #3 - Policy & Blueprints](https://youtu.be/EwO25vecGUo) - Governance, Policy, Blueprints +- [Azure Governance And Security | Secure Azure Key Vault Using Azure Policy](https://youtu.be/o4EfqtlVyR4) - Governance, Security, Key Vault +- [Azure Key Vault RBAC and Policy Deep Dive](https://youtu.be/oYzFWOrZMKc) - Key Vault, RBAC, Policy +- [Azure Policy - Non-Compliance Messages](https://youtu.be/N4Xom4IYcUE) - Non-Compliance, Messages, Policy +- [Azure Policy as Code - Zero to Hero in 60 minutes](https://youtu.be/AVn5glYBz84?t=2380) - Policy as Code, Zero to Hero, 60 Minutes +- [Azure Policy Remediation Deep Dive](https://youtu.be/fhIn_kHz4hk) - Remediation, Deep Dive, Policy +- [Azure Policy](https://youtu.be/1NzWYIsKUl4) - Policy, Azure, Overview +- [Azure Spring Clean: Some points to remember about Azure Governance](https://youtu.be/lOHK_k6w4e4) - Spring Clean, Governance, Points to Remember +- [Azure Update Manager with Azure Policies](https://www.youtube.com/watch?v=Da1EsoAzUoY) - Update Manager, Policies, Azure +- [Block Deletes Using the New DenyAction Azure Policy Effect](https://youtu.be/ZVshBqY8kts) - Block Deletes, DenyAction, Policy +- [Build Your Tagging Strategy with Azure Policy and Automation](https://youtu.be/4ebXt0iMiEU) - Tagging Strategy, Automation, Policy +- [Custom Policy for Azure Governance - How to create custom Azure Policy from Scratch](https://youtu.be/n-jL_xe9858) - Custom Policy, Governance, Creation +- [Detailed look at Azure Policy Exemption Permission Requirements](https://youtu.be/clAu7VqpacA) - Exemption, Permission Requirements, Policy +- [DevOps | Azure Policy Tutorial | Terraform | GitHub | Compliance enforcement in Azure Subscription](https://youtu.be/MQ3X7qDCddU?si=kSuv2U6Rcj791aNw) - DevOps, Policy Tutorial, Compliance +- [Festive Tech Calendar: Day 1 - Azure Governance](https://youtu.be/GK_8FAHwoe8) - Festive Tech, Governance, Day 1 +- [Festive Tech Calendar: Day 6 - Azure Governance: Azure customized Policies](https://www.youtube.com/watch?v=rQXZWIvW1Ww) - Festive Tech, Governance, Customized Policies +- [Flexing Your Security Governance with Azure Policy As Code](https://youtu.be/-KSLh2I9e1U) - Security Governance, Policy as Code, Flexing +- [Functionality and Usage of Azure Policy - AZ-900 Certification Course](https://youtu.be/z7WMqHE3R8g?si=Zp7bpzNSzD-wBewt) - Functionality, Usage, Certification Course +- [Get Visibility Into Your Environment With Azure Governance Visualizer](https://youtu.be/hZXvF5oypLE) - Visibility, Environment, Governance Visualizer +- [Getting to Green with Azure Policy](https://youtu.be/P3PRXf-IilI?si=HWAq3sWCjpB7TpDn) - Getting to Green, Policy, Azure +- [GitOps with Azure Arc Kubernetes via Azure Policy](https://youtu.be/AE5Io3qtABs) - GitOps, Kubernetes, Policy +- [Global Azure: Policy as Code with Bicep for Enterprise Scale](https://youtu.be/qpnMJXw6pIg) - Policy as Code, Bicep, Enterprise Scale +- [Help Everyone Follow The Rules | Azure Policy](https://youtu.be/7xhcnxRrXYQ?si=SvyB8WczZhLjxeLD) - Rules, Policy, Azure +- [How to enforce Azure Naming Convention Using Azure Policies](https://youtu.be/eqNIV9QKflg?si=VG2KDsFagFKctbDD) - Naming Convention, Enforcement, Policies +- [If Only I Knew THIS About Azure 5 Years Ago](https://youtu.be/DxwKYvcMud4?si=jLk8b4EmtlzUVcDB) - Azure, 5 Years Ago, Insights +- [Inside Azure Governance - You in Control](https://www.youtube.com/watch?v=CHFLgfELV1E) - Governance, Control, Azure +- [Livestream: A Gentle Introduction to Azure Policy](https://www.youtube.com/live/AwI9Z_7E7eA?si=1jSWP9CxsyFwD54G) - Introduction, Policy, Livestream +- [Microsoft Azure Master Class Part 3 - Governance](https://youtu.be/cIh_Nfl67T0?t=2830) - Master Class, Governance, Part 3 +- [Organizational Governance and Best Practices for Control](https://www.youtube.com/watch?v=utVRZg0TNu8) - Governance, Best Practices, Control +- [Regain Control with Azure Governance](https://www.youtube.com/watch?v=M2y0QsHLeSs) - Control, Governance, Azure +- [Understanding Organizational Governance and Best Practices for Control](https://youtu.be/utVRZg0TNu8) - Governance, Best Practices, Control +- [Using Azure Security Center for Policy and Regulatory Compliance](https://youtu.be/AXgBoSz0dAs) - Security Center, Regulatory Compliance, Policy +- [Virtual Machine Scale Sets Logs With An Azure Policy](https://youtu.be/wT0-BA5MrZ8) - Scale Sets, Logs, Policy +- [Writing DSC Resources for Azure Policy Guest Configuration - For Linux](https://youtu.be/RxnxpZqvEmg) - DSC Resources, Guest Configuration, Linux ### Community Podcasts -- [057 - Azure Policy and Azure Key Vault integration](https://ctrlaltazure.com/episodes/057-azure-policy-and-azure-key-vault-integration) -- [109 - Azure Policy as Code with Jesse Loudon](https://ctrlaltazure.com/episodes/109-azure-policy-as-code) -- [S01 E16 - Azure Security Podcast - Azure Policy](https://rss.com/podcasts/azsecpodcast/93831/) -- [S01 E43 - Everything you need to know about Azure Policy](https://rss.com/podcasts/azsecpodcast/350402/) -- [Episode 349 – The War of the Policies](https://www.msclouditpropodcast.com/episode349/) +- [057 - Azure Policy and Azure Key Vault integration](https://ctrlaltazure.com/episodes/057-azure-policy-and-azure-key-vault-integration) - Policy, Key Vault, Integration +- [109 - Azure Policy as Code with Jesse Loudon](https://ctrlaltazure.com/episodes/109-azure-policy-as-code) - Policy as Code, Jesse Loudon, Podcast +- [S01 E16 - Azure Security Podcast - Azure Policy](https://rss.com/podcasts/azsecpodcast/93831/) - Security, Policy, Podcast +- [S01 E43 - Everything you need to know about Azure Policy](https://rss.com/podcasts/azsecpodcast/350402/) - Policy, Azure, Podcast +- [Episode 349 – The War of the Policies](https://www.msclouditpropodcast.com/episode349/) - Policies, War, Podcast ### Community Books -- [Policy Design in the Age of Digital Adoption: Explore how PolicyOps can drive Policy as Code adoption in an organization's digital transformation](https://www.amazon.com/Policy-Design-Digital-Adoption-transformation-dp-1801811741/dp/1801811741/?) -- [Pro Azure Governance and Security: A Comprehensive Guide to Azure Policy, Blueprints, Security Center, and Sentinel](https://www.amazon.com/Pro-Azure-Governance-Security-Comprehensive/dp/1484249097) +- [Policy Design in the Age of Digital Adoption: Explore how PolicyOps can drive Policy as Code adoption in an organization's digital transformation](https://www.amazon.com/Policy-Design-Digital-Adoption-transformation-dp-1801811741/dp/1801811741/?) - Policy Design, Digital Adoption, PolicyOps +- [Pro Azure Governance and Security: A Comprehensive Guide to Azure Policy, Blueprints, Security Center, and Sentinel](https://www.amazon.com/Pro-Azure-Governance-Security-Comprehensive/dp/1484249097) - Governance, Security, Guide ### Community Articles -- [AKS Policy Reference Overriding Or Disabling Of Containers Apparmor Profile Should Be Restricted](https://securecloud.blog/2021/11/18/aks-policy-reference-overriding-or-disabling-of-containers-apparmor-profile-should-be-restricted/) -- [Assign policy definitions from Azure landing zones Terraform module](https://trond.sjovang.no/posts/azure_policy_terraform_alz/) -- [An Azure Policy Journey](https://medium.com/microsoftazure/an-azure-policy-journey-7bb53b41c43d) -- [Audit Azure Web App Against NotLegit Vulnerability](https://azsec.azurewebsites.net/2021/12/23/audit-azure-web-app-against-notlegit-vulnerability/) -- [Audit and enable Azure Hybrid Benefit with Azure Policy](https://andrewmatveychuk.com/audit-and-enable-azure-hybrid-benefit-using-azure-policy/) -- [Audit Publicly Accessible Azure App Services With Azure Policy](https://charbelnemnom.com/audit-publicly-accessible-azure-app-services-with-azure-policy/) -- [Audit Server Settings With Azure Policy Guest Configuration](https://www.thomasmaurer.ch/2021/03/audit-server-settings-with-azure-policy-guest-configuration/) -- [Audit Subnets That Do Not Have Network Security Group Associated](https://charbelnemnom.com/audit-subnets-that-do-not-have-network-security-group-associated/) -- [Auditing For Disaster Recovery With Azure Policy](https://adinermie.com/auditing-for-disaster-recovery-with-azure-policy/) -- [Auditing GPOs with Azure Guest Configuration Policy](https://manbearpiet.com/posts/guest-configuration-policy/) -- [Auto Install Azure Monitor Agent with Azure Policy](https://www.cloudsma.com/2018/10/auto-install-azure-monitor-agent-with-azure-policy/) -- [Automatic Tagging For Azure Resources](https://andrewmatveychuk.com/automatic-tagging-for-azure-resources/) -- [Automatically Enable Microsoft Defender For Cloud Enhanced Security Features](https://samilamppu.com/2021/12/28/automatically-enable-microsoft-defender-for-cloud-enhanced-security-features/) -- [Automatically Tag Azure VM's Behind A Load Balancer](https://autosysops.com/blog/automatically-tag-azure-vms-behind-a-load-balancer) -- [Automating Backup Onboarding Using Azure Policy](https://adinermie.com/automating-backup-onboarding-using-azure-policy/) -- [AzGovViz With Azure DevOps](https://jacktracey.co.uk/azgovviz-with-azure-devops/) -- [Azure GitHub Export and Visual studio code](https://www.cloudpartner.fi/?p=5232) -- [Azure Policy – Add Date/Time Resource Group Tag](https://www.stefanroth.net/2019/10/06/azure-policy-add-date-time-resource-group-tag/) -- [Azure Policy – an underrated component of a scalable data platform (part1)](https://pl.seequality.net/azure-policy-underrated-part1/) -- [Azure Policy – an underrated component of a scalable data platform (part2)](https://pl.seequality.net/azure-policy-underrated-part2/) -- [Azure Policy – Audit And Deploy CanNotDelete Lock On Resource Group Based On Tags](https://www.stefanroth.net/2020/02/03/azure-policy-audit-and-deploy-cannotdelete-lock-on-resource-group-based-on-tags/) -- [Azure Policy – Export Azure Policy Definitions](https://www.stefanroth.net/2019/07/30/azure-policy-export-azure-policy-definitions/) -- [Azure Policy – How Precedence Works](https://www.stefanroth.net/2020/01/17/azure-policy-how-precedence-works/) -- [Azure Policy - Looking at the DenyAction Effect](https://www.georgeollis.com/azure-policy-deny-action-effect/) -- [Azure Policy A Love Story](https://michaelhowardsecure.blog/2019/03/29/azure-policy-a-love-story/) -- [Azure Policy, Application Gateway WAF and OWASP rulesets](https://www.yobyot.com/azure/azure-policy-application-gateway-waf-and-owasp-rulesets/2023/04/18/) -- [Azure Policy As Code – Accelerate Governance In Cloud](https://suneelsunkara.wordpress.com/2021/02/21/azure-policy-as-code-accelerate-governance-in-cloud/) -- [Azure Policy As Code With Terraform Part 1](https://jloudon.com/cloud/Azure-Policy-as-Code-with-Terraform-Part-1/) -- [Azure Policy As Code With Terraform Part 2](https://jloudon.com/cloud/Azure-Policy-as-Code-with-Terraform-Part-2/) -- [Azure Policy As Code](https://craigclouditpro.wordpress.com/2019/09/10/azure-policy-as-code/) -- [Azure Policy Compliance Remediate Azure DevOps](https://charbelnemnom.com/azure-policy-compliance-remediate-azure-devops/) -- [Azure Policy Definitions for Controlling ARM API versions](https://blog.tyang.org/2022/04/24/policy-definitions-control-arm-api-versions/) -- [Azure Policy Deploy MS Antimalware Ext For SQL VM](https://blog.tyang.org/2021/10/03/azure-policy-deploy-ms-antimalware-ext-for-sql-vm/) -- [Azure Policy Enforce Tags For Resource Creation](https://www.cloudcorner.gr/microsoft/azure/azure-policy-enforce-tags-for-resource-creation/) -- [Azure Policy Exemptions Added to Resource Graph](https://www.cloudsma.com/2023/09/azure-policy-exemptions-resource-graph/) -- [Azure Policy For Kubernetes Custom Policies On Azure Arc Enabled Kubernetes](https://www.danielstechblog.io/azure-policy-for-kubernetes-custom-policies-on-azure-arc-enabled-kubernetes/) -- [Azure Policy for Kubernetes: Contraints and ConstraintTemplates](https://blog.baeke.info/2021/03/23/azure-policy-for-kubernetes-contraints-and-constrainttemplates/) -- [Azure Policy for Kubernetes with AKS](https://medium.com/@alimazad/azure-policy-for-kubernetes-with-aks-e6fc3fb6811d) -- [Azure Policy Fully Automated Deployment](https://paul-mackinnon.medium.com/azure-policy-fully-automated-deployment-1d6d9f86f97d) -- [Azure Policy gradual rollout with resource selectors](https://www.seifbassem.com/blogs/posts/azure-policy-resource-selectors/) -- [Azure Policy ideas for Azure Governance](https://azureis.fun/posts/Azure-Policy-ideas-for-Azure-Governance/) -- [Azure policy initiatives for Microsoft Defender for Cloud and Microsoft Sentinel workload protections](https://blog.johnjoyner.net/azure-policy-initiatives-for-microsoft-defender-for-cloud-and-microsoft-sentinel-workload-protections/) -- [Azure Policy Limit The Azure VM Sizes](https://www.cloudcorner.gr/microsoft/azure/azure-policy-limit-the-azure-vm-sizes/) -- [Azure Policy Policies Not Evaluated Right Away](https://cloudadministrator.net/2021/01/21/azure-policy-policies-not-evaluated-right-away/) -- [Azure Policy Search with Azure Graph](https://zigmax.net/azure-policy-search-with-azure-graph/) -- [Azure Policy To Enable Network Policies For Private Endpoints](https://www.cloudcorner.gr/microsoft/azure/azure-policy-to-enable-network-policies-for-private-endpoints/) -- [Azure Policy Where To Start](https://wedoazure.ie/2019/08/22/azure-policy-where-to-start/) -- [Azure Policy: Kubernetes pod security baseline explained](https://blog.baeke.info/2021/03/03/azure-policy-kubernetes-pod-security-baseline-explained/) -- [Azure Policy: Starter Guide](https://andrewmatveychuk.com/azure-policy-starter-guide/) -- [Azure Policy: What If We Use Bicep ?](https://charotamine.medium.com/azure-policies-deploy-and-test-with-bicep-bfa80082ec1) -- [Azure Policy: What If You Test Your Policies ?](https://charotamine.medium.com/azure-policy-what-if-you-test-your-policies-5ddb12c95a07) -- [Azure Policy's new DenyAction effect](https://dev.to/omiossec/azure-policys-new-denyaction-effect-2ljn) -- [Azure Spring Clean: Azure Policy For AKS](https://samcogan.com/azure-spring-clean-aks-policy/) -- [Azure Spring Clean: Azure Policy For Managing Your Subscription](https://training.majorguidancesolutions.com/blog/azure-policy-for-managing-your-subscription) -- [Azure Spring Clean: Diagnostic Settings](https://charotamine.medium.com/azure-spring-clean-diagnostic-settings-26c61d8d165d) -- [Azure Spring Clean: DINE To Automate Your Monitoring Governance With Azure Monitor Metric Alerts](https://jloudon.com/cloud/Azure-Spring-Clean-DINE-to-Automate-your-Monitoring-Governance-with-Azure-Monitor-Metric-Alerts/) -- [Azure Spring Clean: Replacing Kubernetes Pod Security Policies With Azure Policy On AKS](https://samcogan.com/replacing-kubernetes-pod-security-polices-with-azure-policy-on-aks) -- [Azure Spring Clean: Using Azure Policy And Security Center For Organizational Governance](https://captainhyperscaler.github.io/community/2021/03/24/azure-spring-clean/) -- [Azure Spring Clean: Unleashing the Power of Azure Policy for Seamless Azure Arc Governance!](https://wmatthyssen.com/2024/03/07/azure-spring-clean-unleashing-the-power-of-azure-policy-for-seamless-azure-arc-governance/) -- [Azure SQL Database Cost Optimization via Azure Policies](https://medium.com/@ashu.tripathi91/azure-sql-database-cost-optimization-via-azure-policies-2a11b02c828b) -- [Bicep - Creating Custom Azure Policy Initiatives](https://www.jorgebernhardt.com/bicep-azurepolicy-custom-initiative-definition/) -- [Bypassing policies in Azure](https://dev.to/cse/bypassing-policies-in-azure-29fc) -- [Build Azure Policy Compliance Workbook](https://www.cloudsma.com/2021/10/build-azure-policy-compliance-workbook/) -- [Bulk Enablement of Windows Admin Center Extension on Azure Arc](https://medium.com/@pratheep.sinnathurai/bulk-enablement-of-windows-admin-center-extension-on-azure-arc-de6f7ac17f19) -- [Cloud Governance With Azure Policy Part 1](https://jloudon.com/cloud/Cloud-Governance-with-Azure-Policy-Part-1/) -- [Cloud Governance With Azure Policy Part 2](https://jloudon.com/cloud/Cloud-Governance-with-Azure-Policy-Part-2/) -- [Compliance and delegation of Azure Locks through Azure Policy](https://faun.pub/compliance-and-delegation-of-azure-locks-through-azure-policy-9f464d40faee) -- [Controlling Azure SQL Firewall Rules](https://cloudadministrator.net/2021/03/31/controlling-azure-sql-firewall-rules/) -- [Create And Assign Custom Azure Policies For Azure Governance](https://mohitgoyal.co/2019/10/08/create-and-assign-custom-azure-policies-for-azure-governance/) -- [Create Azure Policy to limit VNet Address Space creation to certain address spaces only](https://blog.djurasovic.com/create-azure-policy-to-limit-vnet-address-space-creation-to-certain-address-spaces-only/) -- [Create Azure Policy Assignment to block the creation of expensive VMs and block creation of certain resource types](https://blog.djurasovic.com/create-azure-policy-assignment-to-block-the-creation-of-expensive-vms-and-block-creation-of-certain-resource-types/) -- [Create Custom Security Center Recommendation With Azure Policy](https://zimmergren.net/create-custom-security-center-recommendation-with-azure-policy/) -- [Creating Custom Azure Policy for Kubernetes to Disallow Non-Compliant Image Registries](https://kristhecodingunicorn.com/post/k8s_deprecated_registry_azpolicy/) -- [Creating and Deploying Azure Policy via Terraform](https://blog.johnfolberth.com/creating-and-deploying-azure-policy-via-terraform/) -- [Custom Azure Policy for Kubernetes (AKS)](https://atouati.com/posts/2022/11/custom-azure-policy-for-kubernetes-aks/) -- [Demystify Azure DDoS Protection Azure Policy](https://azsec.azurewebsites.net/2021/07/17/demystify-azure-ddos-protection-azure-policy/) -- [DenyAction effect for Azure Policy](https://vanyurikhin.blog/2023/01/04/denyaction-effect-for-azure-policy/) -- [Deny Azure Role Assignment With Azure Policy](https://azsec.azurewebsites.net/2021/04/15/deny-azure-role-assignment-with-azure-policy/) -- [Deny Resource Type Creation with Azure Policy](https://euc365.com/post/deny-resource-type-creation-azure-policy/) -- [Deploy And Assign Azure Policy Via Azure DevOps Pipelines](https://charbelnemnom.com/deploy-and-assign-azure-policy-via-azure-devops-pipelines/) -- [Deploy Azure Monitor Agent at Scale](https://www.cloudsma.com/2021/09/deploy-azure-monitor-agent-scale/) -- [Deploy Azure Policy To ManagementGroup With Bicep](https://www.nielskok.tech/infrastructure-as-code/deploy-azure-policy-to-managementgroup-with-bicep/) -- [Deploy Azure Policy Using Azure DevOps CI/CD Pipeline](https://autosysops.com/blog/deploy-azure-policy-with-azure-devops/) -- [Deploy Azure Policy Using Terraform](https://ydcloud.wordpress.com/2019/12/10/deploy-azure-policy-using-terraform/) -- [Deploying Azure Policy remediation via Azure Lighthouse with PIM](https://rios.engineer/deploying-azure-policy-remediation-via-azure-lighthouse-with-pim/) -- [Do you see value in Azure Policy Evaluator?](https://www.jannemattila.com/azure/2024/02/26/do-you-see-value-in-azure-policy-evaluator.html) -- [Diagnostic Settings Storage Accounts Event Hub](https://charbelnemnom.com/diagnostic-settings-storage-accounts-event-hub/) -- [Duplicate Azure Policy Definition and Initiative](https://charbelnemnom.com/duplicate-azure-policy-definition-and-initiative/) -- [Elevating Privileges Through Azure Policy](https://medium.com/@vladimir.tul/elevating-privileges-through-azure-policy-872298cf673f) -- [Enable Azure SQL Auditing With Azure Policy](https://charbelnemnom.com/enable-azure-sql-auditing-with-azure-policy/) -- [Enable FTPS On Azure App Services With Azure Policy](https://charbelnemnom.com/enable-ftps-on-azure-app-services-with-azure-policy/) -- [Enable HTTPS On Azure App Services With Azure Policy](https://charbelnemnom.com/enable-https-on-azure-app-services-with-azure-policy/) -- [Enable Managed Identity For Web App Azure Policy](https://charbelnemnom.com/enable-managed-identity-for-web-app-azure-policy/) -- [Enable Purge Protection Key Vault Azure Policy](https://charbelnemnom.com/enable-purge-protection-key-vault-azure-policy/) -- [Enable Resource Logs In Virtual Machine Scale Sets With An Azure Policy](https://medium.com/microsoftazure/enable-resource-logs-in-virtual-machine-scale-sets-with-an-azure-policy-14624387cf2f) -- [Enable Vulnerability Assessment On SQL Servers](https://charbelnemnom.com/enable-vulnerability-assessment-on-sql-servers/) -- [Enterprise Policy as Code with Azure DevOps](https://luke.geek.nz/azure/enterprise-policy-code-azure-devops/) -- [Enforce API Management Product Subscriptions With Azure Policy](https://yourazurecoach.com/2020/08/05/enforce-api-management-product-subscriptions-with-azure-policy/) -- [Enforce CanNotDelete Resource Lock using Azure Policy](https://jeffbrown.tech/azure-policy-resource-lock/) -- [Enforce TLS 1.2 on Web Apps with Azure Policy](https://charbelnemnom.com/enforce-tls-1-2-on-web-apps-with-azure-policy/) -- [Enhancing PCI Compliance In Your Azure Environment By Using Azure Policy Custom Initiatives](https://www.darwinsec.com/post/increasing-pci-compliance-in-your-azure-environment-by-using-custom-initiatives) -- [Enterprise Scale Policy Driven Governance](https://stefanstranger.github.io/2020/08/28/EnterpriseScalePolicyDrivenGovernance/) -- [Global Azure: Policy As Code With Bicep For Enterprise Scale](https://jloudon.com/cloud/Global-Azure-Policy-as-Code-with-Bicep-for-Enterprise-Scale/) -- [Govern Azure Virtual Network VNET CIDR Ranges With Azure Policy](https://adinermie.com/govern-azure-virtual-network-vnet-cidr-ranges-with-azure-policy/) -- [Help My Azure Policy Is Not Firing](https://yourazurecoach.com/2021/01/25/help-my-azure-policy-is-not-firing/) -- [How To Azure Policy Via ARM Template](https://wedoazure.ie/2019/09/30/how-to-azure-policy-via-arm-template/) -- [How To Choose An Azure Naming Convention](https://wedoazure.ie/2019/09/26/how-to-choose-an-azure-naming-convention/) -- [How To Control DDOS Plan Deployment Using Azure Policy](https://wedoazure.ie/2021/11/02/how-to-control-ddos-plan-deployment-using-azure-policy/) -- [How To Create Own Azure Custom Policy](https://www.c-sharpcorner.com/article/how-to-create-own-azure-custom-policy2/) -- [How To Deploy Azure Policies With ARM Templates](https://andrewmatveychuk.com/how-to-deploy-azure-policies-with-arm-templates/) -- [How To Deploy Azure Policy From An Azure DevOps Pipeline](https://andrewmatveychuk.com/how-to-deploy-azure-policy-from-an-azure-devops-pipeline/) -- [How To Deploy Azure Policy With Bicep](https://andrewmatveychuk.com/how-to-deploy-azure-policy-with-bicep) -- [How to Deploy Azure Policy with Bicep?](https://erudinsky.com/2022/09/20/azure-policy-as-code-with-bicep/) -- [How To Dynamically Assign Azure Policy via Terraform](https://blog.johnfolberth.com/how-to-dynamically-assign-azure-policy-via-terraform/) -- [How To Enforce Naming Convention For Azure Resources](https://andrewmatveychuk.com/how-to-enforce-naming-convention-for-azure-resources/) -- [How To Ensure Proper Configuration For Your Azure Resources](https://andrewmatveychuk.com/how-to-ensure-proper-configuration-for-your-azure-resources/) -- [How To Export And Backup Azure Policy Definitions](https://charbelnemnom.com/how-to-export-and-backup-azure-policy-definitions/) -- [How to Get All Azure Policy Assignments of a Specific Category?](https://kristhecodingunicorn.com/post/azpolicy_category_assignments/) -- [How To Win Vs Azure Policy Non-Compliance](https://jloudon.com/cloud/How-To-Win-vs-Azure-Policy-Non-Compliance/) -- [Implementing and troubleshooting a custom Azure Policy Definition [Step-by-step Guide]](https://itnext.io/implementing-and-troubleshooting-a-custom-azure-policy-definition-1ab8d0634bb2) -- [Improving The User Experience Of Azure Policy](https://yourazurecoach.com/2022/01/21/improving-the-user-experience-of-azure-policy/) -- [Keep Control Of Your Azure Environment With Azure Policy](https://www.thomasmaurer.ch/2020/03/keep-control-of-your-azure-environment-with-azure-policy/) -- [Keeping AKS Clusters Continuously Secure With Azure Policy](https://kristhecodingunicorn.com/post/aks_azure_policy/) -- [Lessons Learned Developing A Custom Policy](https://stefanstranger.github.io/2021/01/22/LessonsLearnedDevelopingACustomPolicy/) -- [Lessons Learned Testing The Configure Backup On VMs Azure Policy](https://adinermie.com/lessons-learned-testing-the-configure-backup-on-vms-azure-policy/) -- [Looking at Azure Policy resource selectors](https://www.georgeollis.com/azure-policy-resource-selectors/) -- [Manage Azure Policy with Terraform](https://brendanthompson.com/posts/2022/11/manage-azure-policy-with-terraform) -- [Managing Azure Resource Tags Using Azure Policy Modify Effect](https://blog.tyang.org/2020/03/09/managing-azure-resource-tags-using-azure-policy-modify-effect/) -- [Monitoring Azure Policy Compliance States 2021 Edition](https://blog.tyang.org/2021/12/06/monitoring-azure-policy-compliance-states-2021-edition/) -- [Natively Monitoring Azure Policy Compliance States in Azure Monitor - 2023 Edition](https://blog.tyang.org/2023/09/30/natively0monitoring-azure-policy-compliance-states-in-azure-monitor-2023-edition/) -- [Notes On Azure Policy Exemption](https://azsec.azurewebsites.net/2021/12/22/notes-on-azure-policy-exemption/) -- [November 2020 Update For Azure Diagnostic Settings Policy Definitions](https://blog.tyang.org/2020/11/22/november-2020-update-for-azure-diagnostic-settings-policy-definitions/) -- [October 2020 Update For Azure Diagnostic Settings Policy Definitions](https://blog.tyang.org/2020/10/12/october-2020-update-for-azure-diagnostic-settings-policy-definitions/) -- [Orphaned Azure Security Principals Clean-up & Azure Policy Managed Identity Role Assignment Automation](https://mortenknudsen.net/?p=938) -- [Persistence with Azure Policy Guest Configuration](https://cloudbrothers.info/en/azure-persistence-azure-policy-guest-configuration/) -- [Prevent deletion of resources with Azure Policy](https://gillianstravers.com/azure/prevent-deletion-of-resources-with-azure-policy/) -- [Policy as Code: Using Azure Bicep to deploy Azure Policies](https://periwalmanish.wordpress.com/2022/08/13/policy-as-code-using-bicep-to-deploy-azure-policies/) -- [Policy as Code: Using Modules and defining Custom Roles using Azure Bicep](https://periwalmanish.wordpress.com/2022/08/23/policy-as-code-using-modules-and-defining-custom-roles-using-azure-bicep/) -- [Security Posture Management With Azure Policy And Microsoft Defender For Cloud](https://securecloud.blog/2021/12/17/security-posture-management-with-azure-policy-and-microsoft-defender-for-cloud/) -- [Securing Azure PaaS Leveraging Azure Policies](https://medium.com/@sjimen11/securing-azure-paas-leveraging-azure-policies-8ea31387d45a) -- [Talking Azure Policy As Code On CtrlAltAzure Podcast](https://jloudon.com/cloud/Talking-Azure-Policy-as-Code-on-the-CtrlAltAzure-podcast/) -- [Terraforming Azure Policy](https://adinermie.com/terraforming-azure-policy/) -- [Test Azure Policies](https://checinski.cloud/test-azure-policies/) -- [Testing out Azure Policies Modify Effect](https://www.georgeollis.com/azure-policy-modify/) -- [The A-Z of Azure Policy](https://michaeldurkan.com/2023/03/14/the-a-z-of-azure-policy/) -- [Tips On Creating Azure Policies For Azure SQL Databases](https://cloudadministrator.net/2021/04/07/tips-on-creating-azure-policies-for-azure-sql-databases/) -- [Trigger An On Demand Azure Policy Compliance Evaluation Scan](https://www.danielstechblog.io/trigger-an-on-demand-azure-policy-compliance-evaluation-scan/) -- [Trigger An On Demand Azure Policy Evaluation Scan At Management Group Scope](https://azsec.azurewebsites.net/2021/11/15/trigger-an-on-demand-azure-policy-evaluation-scan-at-management-group-scope/) -- [Trigger Azure Policy Scan Multiple Subscriptions](https://checinski.cloud/trigger-azure-policy-scan-multiple-subscriptions/) -- [Understanding Azure Policies With Visual Studio Code](https://zimmergren.net/understanding-azure-policies-with-visual-studio-code/) -- [Understanding Azure Policy For Regulatory Compliance](https://azuredays.com/2020/07/07/understanding-azure-policy-for-regulatory-compliance) -- [Updated Azure Policy Definitions For Azure Diagnostics Settings Again](https://blog.tyang.org/2019/11/17/updated-azure-policy-definitions-for-azure-diagnostics-settings-again/) -- [Use Azure Policies to Require Resource Tags with PowerShell](https://jeffbrown.tech/use-azure-policies-to-require-resource-tags-with-powershell/) -- [Use Azure Policy to audit if Azure Arc-enabled servers meet security baseline requirements](https://azurearcjumpstart.io/azure_arc_jumpstart/azure_arc_servers/day2/arc_security_baseline/) -- [Using ARM Templates To Deploy Azure Policy Initiative](https://andrewmatveychuk.com/using-arm-templates-to-deploy-azure-policy-initiatives/) -- [Using Azure Policy To Audit Resource Group Resource Locks](https://adinermie.com/using-azure-policy-to-audit-resource-group-resource-locks/) -- [Using Azure Policy to configure your resources](https://manbearpiet.com/posts/applying-guest-configuration-policy/) -- [Using Azure policy to control workload identity federation](https://blog.identitydigest.com/azuread-mi-federate-policy/) -- [Using Azure Policy To Implement Tagging Inheritance](https://archiechristopher.co.uk/2022/01/07/using-azure-policy-to-implement-tagging-inheritance/) -- [Using VM applications and Azure Policy to deploy applications](https://www.georgeollis.com/using-vm-applications-and-azure-policy/) -- [Using Conftest For Azure Policy For Kubernetes](https://www.danielstechblog.io/using-conftest-for-azure-policy-for-kubernetes/) -- [VNet peering using Azure Policy](https://rubberduckdev.com/azure-policy-vnet-peering/) -- [Walkthrough Using Azure Policy To Audit And Enforce Compliance](https://azuredays.com/2020/07/09/walkthrough-using-azure-policy-to-audit-and-enforce-compliance/) -- [What are Azure Policy Overrides?](https://www.georgeollis.com/what-are-azure-policy-overrides/) -- [Writing A Custom Azure Policy](https://journeyofthegeek.com/2021/03/07/writing-a-custom-azure-policy/) +- [AKS Policy Reference Overriding Or Disabling Of Containers Apparmor Profile Should Be Restricted](https://securecloud.blog/2021/11/18/aks-policy-reference-overriding-or-disabling-of-containers-apparmor-profile-should-be-restricted/) - AKS, Policy Reference, Apparmor Profile +- [Assign policy definitions from Azure landing zones Terraform module](https://trond.sjovang.no/posts/azure_policy_terraform_alz/) - Policy Definitions, Landing Zones, Terraform +- [An Azure Policy Journey](https://medium.com/microsoftazure/an-azure-policy-journey-7bb53b41c43d) - Policy Journey, Azure, Medium +- [Audit Azure Web App Against NotLegit Vulnerability](https://azsec.azurewebsites.net/2021/12/23/audit-azure-web-app-against-notlegit-vulnerability/) - Audit, Web App, Vulnerability +- [Audit and enable Azure Hybrid Benefit with Azure Policy](https://andrewmatveychuk.com/audit-and-enable-azure-hybrid-benefit-using-azure-policy/) - Audit, Hybrid Benefit, Policy +- [Audit Publicly Accessible Azure App Services With Azure Policy](https://charbelnemnom.com/audit-publicly-accessible-azure-app-services-with-azure-policy/) - Audit, App Services, Policy +- [Audit Server Settings With Azure Policy Guest Configuration](https://www.thomasmaurer.ch/2021/03/audit-server-settings-with-azure-policy-guest-configuration/) - Audit, Server Settings, Guest Configuration +- [Audit Subnets That Do Not Have Network Security Group Associated](https://charbelnemnom.com/audit-subnets-that-do-not-have-network-security-group-associated/) - Audit, Subnets, Network Security Group +- [Auditing For Disaster Recovery With Azure Policy](https://adinermie.com/auditing-for-disaster-recovery-with-azure-policy/) - Auditing, Disaster Recovery, Policy +- [Auditing GPOs with Azure Guest Configuration Policy](https://manbearpiet.com/posts/guest-configuration-policy/) - Auditing, GPOs, Guest Configuration +- [Auto Install Azure Monitor Agent with Azure Policy](https://www.cloudsma.com/2018/10/auto-install-azure-monitor-agent-with-azure-policy/) - Auto Install, Monitor Agent, Policy +- [Automatic Tagging For Azure Resources](https://andrewmatveychuk.com/automatic-tagging-for-azure-resources/) - Automatic Tagging, Resources, Policy +- [Automatically Enable Microsoft Defender For Cloud Enhanced Security Features](https://samilamppu.com/2021/12/28/automatically-enable-microsoft-defender-for-cloud-enhanced-security-features/) - Defender for Cloud, Enhanced Security, Features +- [Automatically Tag Azure VM's Behind A Load Balancer](https://autosysops.com/blog/automatically-tag-azure-vms-behind-a-load-balancer) - Tagging, VMs, Load Balancer +- [Automating Backup Onboarding Using Azure Policy](https://adinermie.com/automating-backup-onboarding-using-azure-policy/) - Automation, Backup, Onboarding +- [AzGovViz With Azure DevOps](https://jacktracey.co.uk/azgovviz-with-azure-devops/) - AzGovViz, DevOps, Azure +- [Azure GitHub Export and Visual studio code](https://www.cloudpartner.fi/?p=5232) - GitHub Export, Visual Studio Code, Azure +- [Azure Policy – Add Date/Time Resource Group Tag](https://www.stefanroth.net/2019/10/06/azure-policy-add-date-time-resource-group-tag/) - Date/Time Tag, Resource Group, Policy +- [Azure Policy – an underrated component of a scalable data platform (part1)](https://pl.seequality.net/azure-policy-underrated-part1/) - Scalable Data Platform, Underrated Component, Policy +- [Azure Policy – an underrated component of a scalable data platform (part2)](https://pl.seequality.net/azure-policy-underrated-part2/) - Scalable Data Platform, Underrated Component, Policy +- [Azure Policy – Audit And Deploy CanNotDelete Lock On Resource Group Based On Tags](https://www.stefanroth.net/2020/02/03/azure-policy-audit-and-deploy-cannotdelete-lock-on-resource-group-based-on-tags/) - Audit, CanNotDelete Lock, Resource Group +- [Azure Policy – Export Azure Policy Definitions](https://www.stefanroth.net/2019/07/30/azure-policy-export-azure-policy-definitions/) - Export, Policy Definitions, Azure +- [Azure Policy – How Precedence Works](https://www.stefanroth.net/2020/01/17/azure-policy-how-precedence-works/) - Precedence, Policy, Azure +- [Azure Policy - Looking at the DenyAction Effect](https://www.georgeollis.com/azure-policy-deny-action-effect/) - DenyAction, Effect, Policy +- [Azure Policy A Love Story](https://michaelhowardsecure.blog/2019/03/29/azure-policy-a-love-story/) - Love Story, Policy, Azure +- [Azure Policy, Application Gateway WAF and OWASP rulesets](https://www.yobyot.com/azure/azure-policy-application-gateway-waf-and-owasp-rulesets/2023/04/18/) - Application Gateway, WAF, OWASP +- [Azure Policy As Code – Accelerate Governance In Cloud](https://suneelsunkara.wordpress.com/2021/02/21/azure-policy-as-code-accelerate-governance-in-cloud/) - Policy as Code, Governance, Cloud +- [Azure Policy As Code With Terraform Part 1](https://jloudon.com/cloud/Azure-Policy-as-Code-with-Terraform-Part-1/) - Policy as Code, Terraform, Part 1 +- [Azure Policy As Code With Terraform Part 2](https://jloudon.com/cloud/Azure-Policy-as-Code-with-Terraform-Part-2/) - Policy as Code, Terraform, Part 2 +- [Azure Policy As Code](https://craigclouditpro.wordpress.com/2019/09/10/azure-policy-as-code/) - Policy as Code, Azure, Blog +- [Azure Policy Compliance Remediate Azure DevOps](https://charbelnemnom.com/azure-policy-compliance-remediate-azure-devops/) - Compliance, Remediation, DevOps +- [Azure Policy Definitions for Controlling ARM API versions](https://blog.tyang.org/2022/04/24/policy-definitions-control-arm-api-versions/) - Policy Definitions, ARM API, Control +- [Azure Policy Deploy MS Antimalware Ext For SQL VM](https://blog.tyang.org/2021/10/03/azure-policy-deploy-ms-antimalware-ext-for-sql-vm/) - Antimalware, SQL VM, Policy +- [Azure Policy Enforce Tags For Resource Creation](https://www.cloudcorner.gr/microsoft/azure/azure-policy-enforce-tags-for-resource-creation/) - Enforce Tags, Resource Creation, Policy +- [Azure Policy Exemptions Added to Resource Graph](https://www.cloudsma.com/2023/09/azure-policy-exemptions-resource-graph/) - Exemptions, Resource Graph, Policy +- [Azure Policy For Kubernetes Custom Policies On Azure Arc Enabled Kubernetes](https://www.danielstechblog.io/azure-policy-for-kubernetes-custom-policies-on-azure-arc-enabled-kubernetes/) - Custom Policies, Kubernetes, Azure Arc +- [Azure Policy for Kubernetes: Contraints and ConstraintTemplates](https://blog.baeke.info/2021/03/23/azure-policy-for-kubernetes-contraints-and-constrainttemplates/) - Kubernetes, Constraints, ConstraintTemplates +- [Azure Policy for Kubernetes with AKS](https://medium.com/@alimazad/azure-policy-for-kubernetes-with-aks-e6fc3fb6811d) - Kubernetes, AKS, Policy +- [Azure Policy Fully Automated Deployment](https://paul-mackinnon.medium.com/azure-policy-fully-automated-deployment-1d6d9f86f97d) - Automated Deployment, Policy, Azure +- [Azure Policy gradual rollout with resource selectors](https://www.seifbassem.com/blogs/posts/azure-policy-resource-selectors/) - Gradual Rollout, Resource Selectors, Policy +- [Azure Policy ideas for Azure Governance](https://azureis.fun/posts/Azure-Policy-ideas-for-Azure-Governance/) - Ideas, Governance, Policy +- [Azure policy initiatives for Microsoft Defender for Cloud and Microsoft Sentinel workload protections](https://blog.johnjoyner.net/azure-policy-initiatives-for-microsoft-defender-for-cloud-and-microsoft-sentinel-workload-protections/) - Policy Initiatives, Defender for Cloud, Sentinel +- [Azure Policy Limit The Azure VM Sizes](https://www.cloudcorner.gr/microsoft/azure/azure-policy-limit-the-azure-vm-sizes/) - VM Sizes, Limit, Policy +- [Azure Policy Policies Not Evaluated Right Away](https://cloudadministrator.net/2021/01/21/azure-policy-policies-not-evaluated-right-away/) - Policies, Evaluation, Delay +- [Azure Policy Search with Azure Graph](https://zigmax.net/azure-policy-search-with-azure-graph/) - Policy Search, Azure Graph, Azure +- [Azure Policy To Enable Network Policies For Private Endpoints](https://www.cloudcorner.gr/microsoft/azure/azure-policy-to-enable-network-policies-for-private-endpoints/) - Network Policies, Private Endpoints, Policy +- [Azure Policy Where To Start](https://wedoazure.ie/2019/08/22/azure-policy-where-to-start/) - Getting Started, Policy, Azure +- [Azure Policy: Kubernetes pod security baseline explained](https://blog.baeke.info/2021/03/03/azure-policy-kubernetes-pod-security-baseline-explained/) - Kubernetes, Pod Security, Baseline +- [Azure Policy: Starter Guide](https://andrewmatveychuk.com/azure-policy-starter-guide/) - Starter Guide, Policy, Azure +- [Azure Policy: What If We Use Bicep ?](https://charotamine.medium.com/azure-policies-deploy-and-test-with-bicep-bfa80082ec1) - Bicep, Policy, Deployment +- [Azure Policy: What If You Test Your Policies ?](https://charotamine.medium.com/azure-policy-what-if-you-test-your-policies-5ddb12c95a07) - Testing, Policies, Azure +- [Azure Policy's new DenyAction effect](https://dev.to/omiossec/azure-policys-new-denyaction-effect-2ljn) - DenyAction, Effect, Policy +- [Azure Spring Clean: Azure Policy For AKS](https://samcogan.com/azure-spring-clean-aks-policy/) - Spring Clean, AKS, Policy +- [Azure Spring Clean: Azure Policy For Managing Your Subscription](https://training.majorguidancesolutions.com/blog/azure-policy-for-managing-your-subscription) - Spring Clean, Subscription Management, Policy +- [Azure Spring Clean: Diagnostic Settings](https://charotamine.medium.com/azure-spring-clean-diagnostic-settings-26c61d8d165d) - Spring Clean, Diagnostic Settings, Policy +- [Azure Spring Clean: DINE To Automate Your Monitoring Governance With Azure Monitor Metric Alerts](https://jloudon.com/cloud/Azure-Spring-Clean-DINE-to-Automate-your-Monitoring-Governance-with-Azure-Monitor-Metric-Alerts/) - Spring Clean, Monitoring Governance, Metric Alerts +- [Azure Spring Clean: Replacing Kubernetes Pod Security Policies With Azure Policy On AKS](https://samcogan.com/replacing-kubernetes-pod-security-polices-with-azure-policy-on-aks) - Spring Clean, Pod Security, AKS +- [Azure Spring Clean: Using Azure Policy And Security Center For Organizational Governance](https://captainhyperscaler.github.io/community/2021/03/24/azure-spring-clean/) - Spring Clean, Security Center, Organizational Governance +- [Azure Spring Clean: Unleashing the Power of Azure Policy for Seamless Azure Arc Governance!](https://wmatthyssen.com/2024/03/07/azure-spring-clean-unleashing-the-power-of-azure-policy-for-seamless-azure-arc-governance/) - Spring Clean, Arc Governance, Policy +- [Azure SQL Database Cost Optimization via Azure Policies](https://medium.com/@ashu.tripathi91/azure-sql-database-cost-optimization-via-azure-policies-2a11b02c828b) - Cost Optimization, SQL Database, Policies +- [Bicep - Creating Custom Azure Policy Initiatives](https://www.jorgebernhardt.com/bicep-azurepolicy-custom-initiative-definition/) - Bicep, Custom Policy, Initiatives +- [Bypassing policies in Azure](https://dev.to/cse/bypassing-policies-in-azure-29fc) - Bypassing, Policies, Azure +- [Build Azure Policy Compliance Workbook](https://www.cloudsma.com/2021/10/build-azure-policy-compliance-workbook/) - Compliance Workbook, Policy, Azure +- [Bulk Enablement of Windows Admin Center Extension on Azure Arc](https://medium.com/@pratheep.sinnathurai/bulk-enablement-of-windows-admin-center-extension-on-azure-arc-de6f7ac17f19) - Bulk Enablement, Admin Center, Azure Arc +- [Cloud Governance With Azure Policy Part 1](https://jloudon.com/cloud/Cloud-Governance-with-Azure-Policy-Part-1/) - Cloud Governance, Policy, Part 1 +- [Cloud Governance With Azure Policy Part 2](https://jloudon.com/cloud/Cloud-Governance-with-Azure-Policy-Part-2/) - Cloud Governance, Policy, Part 2 +- [Compliance and delegation of Azure Locks through Azure Policy](https://faun.pub/compliance-and-delegation-of-azure-locks-through-azure-policy-9f464d40faee) - Compliance, Delegation, Locks +- [Controlling Azure SQL Firewall Rules](https://cloudadministrator.net/2021/03/31/controlling-azure-sql-firewall-rules/) - SQL Firewall, Rules, Control +- [Create And Assign Custom Azure Policies For Azure Governance](https://mohitgoyal.co/2019/10/08/create-and-assign-custom-azure-policies-for-azure-governance/) - Custom Policies, Governance, Azure +- [Create Azure Policy to limit VNet Address Space creation to certain address spaces only](https://blog.djurasovic.com/create-azure-policy-to-limit-vnet-address-space-creation-to-certain-address-spaces-only/) - VNet Address Space, Limit, Policy +- [Create Azure Policy Assignment to block the creation of expensive VMs and block creation of certain resource types](https://blog.djurasovic.com/create-azure-policy-assignment-to-block-the-creation-of-expensive-vms-and-block-creation-of-certain-resource-types/) - Policy Assignment, Block Creation, Expensive VMs +- [Create Custom Security Center Recommendation With Azure Policy](https://zimmergren.net/create-custom-security-center-recommendation-with-azure-policy/) - Custom Recommendation, Security Center, Policy +- [Creating Custom Azure Policy for Kubernetes to Disallow Non-Compliant Image Registries](https://kristhecodingunicorn.com/post/k8s_deprecated_registry_azpolicy/) - Custom Policy, Kubernetes, Image Registries +- [Creating and Deploying Azure Policy via Terraform](https://blog.johnfolberth.com/creating-and-deploying-azure-policy-via-terraform/) - Deployment, Policy, Terraform +- [Custom Azure Policy for Kubernetes (AKS)](https://atouati.com/posts/2022/11/custom-azure-policy-for-kubernetes-aks/) - Custom Policy, Kubernetes, AKS +- [Demystify Azure DDoS Protection Azure Policy](https://azsec.azurewebsites.net/2021/07/17/demystify-azure-ddos-protection-azure-policy/) - DDoS Protection, Policy, Azure +- [DenyAction effect for Azure Policy](https://vanyurikhin.blog/2023/01/04/denyaction-effect-for-azure-policy/) - DenyAction, Effect, Policy +- [Deny Azure Role Assignment With Azure Policy](https://azsec.azurewebsites.net/2021/04/15/deny-azure-role-assignment-with-azure-policy/) - Role Assignment, Deny, Policy +- [Deny Resource Type Creation with Azure Policy](https://euc365.com/post/deny-resource-type-creation-azure-policy/) - Resource Type, Deny, Policy +- [Deploy And Assign Azure Policy Via Azure DevOps Pipelines](https://charbelnemnom.com/deploy-and-assign-azure-policy-via-azure-devops-pipelines/) - Deployment, Policy, DevOps Pipelines +- [Deploy Azure Monitor Agent at Scale](https://www.cloudsma.com/2021/09/deploy-azure-monitor-agent-scale/) - Monitor Agent, Scale, Deployment +- [Deploy Azure Policy To ManagementGroup With Bicep](https://www.nielskok.tech/infrastructure-as-code/deploy-azure-policy-to-managementgroup-with-bicep/) - ManagementGroup, Bicep, Policy +- [Deploy Azure Policy Using Azure DevOps CI/CD Pipeline](https://autosysops.com/blog/deploy-azure-policy-with-azure-devops/) - Deployment, Policy, DevOps CI/CD +- [Deploy Azure Policy Using Terraform](https://ydcloud.wordpress.com/2019/12/10/deploy-azure-policy-using-terraform/) - Deployment, Policy, Terraform +- [Deploying Azure Policy remediation via Azure Lighthouse with PIM](https://rios.engineer/deploying-azure-policy-remediation-via-azure-lighthouse-with-pim/) - Remediation, Lighthouse, PIM +- [Do you see value in Azure Policy Evaluator?](https://www.jannemattila.com/azure/2024/02/26/do-you-see-value-in-azure-policy-evaluator.html) - Policy Evaluator, Value, Azure +- [Diagnostic Settings Storage Accounts Event Hub](https://charbelnemnom.com/diagnostic-settings-storage-accounts-event-hub/) - Diagnostic Settings, Storage Accounts, Event Hub +- [Duplicate Azure Policy Definition and Initiative](https://charbelnemnom.com/duplicate-azure-policy-definition-and-initiative/) - Duplicate, Policy Definition, Initiative +- [Elevating Privileges Through Azure Policy](https://medium.com/@vladimir.tul/elevating-privileges-through-azure-policy-872298cf673f) - Privileges, Elevation, Policy +- [Enable Azure SQL Auditing With Azure Policy](https://charbelnemnom.com/enable-azure-sql-auditing-with-azure-policy/) - SQL Auditing, Enable, Policy +- [Enable FTPS On Azure App Services With Azure Policy](https://charbelnemnom.com/enable-ftps-on-azure-app-services-with-azure-policy/) - FTPS, App Services, Policy +- [Enable HTTPS On Azure App Services With Azure Policy](https://charbelnemnom.com/enable-https-on-azure-app-services-with-azure-policy/) - HTTPS, App Services, Policy +- [Enable Managed Identity For Web App Azure Policy](https://charbelnemnom.com/enable-managed-identity-for-web-app-azure-policy/) - Managed Identity, Web App, Policy +- [Enable Purge Protection Key Vault Azure Policy](https://charbelnemnom.com/enable-purge-protection-key-vault-azure-policy/) - Purge Protection, Key Vault, Policy +- [Enable Resource Logs In Virtual Machine Scale Sets With An Azure Policy](https://medium.com/microsoftazure/enable-resource-logs-in-virtual-machine-scale-sets-with-an-azure-policy-14624387cf2f) - Resource Logs, Scale Sets, Policy +- [Enable Vulnerability Assessment On SQL Servers](https://charbelnemnom.com/enable-vulnerability-assessment-on-sql-servers/) - Vulnerability Assessment, SQL Servers, Policy +- [Enterprise Policy as Code with Azure DevOps](https://luke.geek.nz/azure/enterprise-policy-code-azure-devops/) - Enterprise Policy, Code, DevOps +- [Enforce API Management Product Subscriptions With Azure Policy](https://yourazurecoach.com/2020/08/05/enforce-api-management-product-subscriptions-with-azure-policy/) - API Management, Product Subscriptions, Policy +- [Enforce CanNotDelete Resource Lock using Azure Policy](https://jeffbrown.tech/azure-policy-resource-lock/) - CanNotDelete, Resource Lock, Policy +- [Enforce TLS 1.2 on Web Apps with Azure Policy](https://charbelnemnom.com/enforce-tls-1-2-on-web-apps-with-azure-policy/) - TLS 1.2, Web Apps, Policy +- [Enhancing PCI Compliance In Your Azure Environment By Using Azure Policy Custom Initiatives](https://www.darwinsec.com/post/increasing-pci-compliance-in-your-azure-environment-by-using-custom-initiatives) - PCI Compliance, Custom Initiatives, Policy +- [Enterprise Scale Policy Driven Governance](https://stefanstranger.github.io/2020/08/28/EnterpriseScalePolicyDrivenGovernance/) - Policy Driven Governance, Enterprise Scale, Azure +- [Global Azure: Policy As Code With Bicep For Enterprise Scale](https://jloudon.com/cloud/Global-Azure-Policy-as-Code-with-Bicep-for-Enterprise-Scale/) - Policy as Code, Bicep, Enterprise Scale +- [Govern Azure Virtual Network VNET CIDR Ranges With Azure Policy](https://adinermie.com/govern-azure-virtual-network-vnet-cidr-ranges-with-azure-policy/) - VNET CIDR Ranges, Governance, Policy +- [Help My Azure Policy Is Not Firing](https://yourazurecoach.com/2021/01/25/help-my-azure-policy-is-not-firing/) - Troubleshooting, Policy, Azure +- [How To Azure Policy Via ARM Template](https://wedoazure.ie/2019/09/30/how-to-azure-policy-via-arm-template/) - ARM Template, Policy, Azure +- [How To Choose An Azure Naming Convention](https://wedoazure.ie/2019/09/26/how-to-choose-an-azure-naming-convention/) - Naming Convention, Azure, Guide +- [How To Control DDOS Plan Deployment Using Azure Policy](https://wedoazure.ie/2021/11/02/how-to-control-ddos-plan-deployment-using-azure-policy/) - DDoS Plan, Deployment, Policy +- [How To Create Own Azure Custom Policy](https://www.c-sharpcorner.com/article/how-to-create-own-azure-custom-policy2/) - Custom Policy, Creation, Azure +- [How To Deploy Azure Policies With ARM Templates](https://andrewmatveychuk.com/how-to-deploy-azure-policies-with-arm-templates/) - ARM Templates, Deployment, Policies +- [How To Deploy Azure Policy From An Azure DevOps Pipeline](https://andrewmatveychuk.com/how-to-deploy-azure-policy-from-an-azure-devops-pipeline/) - DevOps Pipeline, Deployment, Policy +- [How To Deploy Azure Policy With Bicep](https://andrewmatveychuk.com/how-to-deploy-azure-policy-with-bicep) - Bicep, Deployment, Policy +- [How to Deploy Azure Policy with Bicep?](https://erudinsky.com/2022/09/20/azure-policy-as-code-with-bicep/) - Bicep, Deployment, Policy +- [How To Dynamically Assign Azure Policy via Terraform](https://blog.johnfolberth.com/how-to-dynamically-assign-azure-policy-via-terraform/) - Dynamic Assignment, Policy, Terraform +- [How To Enforce Naming Convention For Azure Resources](https://andrewmatveychuk.com/how-to-enforce-naming-convention-for-azure-resources/) - Naming Convention, Enforcement, Resources +- [How To Ensure Proper Configuration For Your Azure Resources](https://andrewmatveychuk.com/how-to-ensure-proper-configuration-for-your-azure-resources/) - Configuration, Resources, Policy +- [How To Export And Backup Azure Policy Definitions](https://charbelnemnom.com/how-to-export-and-backup-azure-policy-definitions/) - Export, Backup, Policy Definitions +- [How to Get All Azure Policy Assignments of a Specific Category?](https://kristhecodingunicorn.com/post/azpolicy_category_assignments/) - Policy Assignments, Category, Azure +- [How To Win Vs Azure Policy Non-Compliance](https://jloudon.com/cloud/How-To-Win-vs-Azure-Policy-Non-Compliance/) - Non-Compliance, Policy, Azure +- [Implementing and troubleshooting a custom Azure Policy Definition [Step-by-step Guide]](https://itnext.io/implementing-and-troubleshooting-a-custom-azure-policy-definition-1ab8d0634bb2) - Custom Policy, Troubleshooting, Guide +- [Improving The User Experience Of Azure Policy](https://yourazurecoach.com/2022/01/21/improving-the-user-experience-of-azure-policy/) - User Experience, Policy, Azure +- [Keep Control Of Your Azure Environment With Azure Policy](https://www.thomasmaurer.ch/2020/03/keep-control-of-your-azure-environment-with-azure-policy/) - Control, Environment, Policy +- [Keeping AKS Clusters Continuously Secure With Azure Policy](https://kristhecodingunicorn.com/post/aks_azure_policy/) - AKS Clusters, Security, Policy +- [Lessons Learned Developing A Custom Policy](https://stefanstranger.github.io/2021/01/22/LessonsLearnedDevelopingACustomPolicy/) - Custom Policy, Development, Lessons Learned +- [Lessons Learned Testing The Configure Backup On VMs Azure Policy](https://adinermie.com/lessons-learned-testing-the-configure-backup-on-vms-azure-policy/) - Backup, VMs, Policy +- [Looking at Azure Policy resource selectors](https://www.georgeollis.com/azure-policy-resource-selectors/) - Resource Selectors, Policy, Azure +- [Manage Azure Policy with Terraform](https://brendanthompson.com/posts/2022/11/manage-azure-policy-with-terraform) - Management, Policy, Terraform +- [Managing Azure Resource Tags Using Azure Policy Modify Effect](https://blog.tyang.org/2020/03/09/managing-azure-resource-tags-using-azure-policy-modify-effect/) - Resource Tags, Modify Effect, Policy +- [Monitoring Azure Policy Compliance States 2021 Edition](https://blog.tyang.org/2021/12/06/monitoring-azure-policy-compliance-states-2021-edition/) - Compliance States, Monitoring, Policy +- [Natively Monitoring Azure Policy Compliance States in Azure Monitor - 2023 Edition](https://blog.tyang.org/2023/09/30/natively0monitoring-azure-policy-compliance-states-in-azure-monitor-2023-edition/) - Compliance States, Monitoring, Azure Monitor +- [Notes On Azure Policy Exemption](https://azsec.azurewebsites.net/2021/12/22/notes-on-azure-policy-exemption/) - Exemption, Policy, Notes +- [November 2020 Update For Azure Diagnostic Settings Policy Definitions](https://blog.tyang.org/2020/11/22/november-2020-update-for-azure-diagnostic-settings-policy-definitions/) - Diagnostic Settings, Policy Definitions, Update +- [October 2020 Update For Azure Diagnostic Settings Policy Definitions](https://blog.tyang.org/2020/10/12/october-2020-update-for-azure-diagnostic-settings-policy-definitions/) - Diagnostic Settings, Policy Definitions, Update +- [Orphaned Azure Security Principals Clean-up & Azure Policy Managed Identity Role Assignment Automation](https://mortenknudsen.net/?p=938) - Security Principals, Clean-up, Managed Identity +- [Persistence with Azure Policy Guest Configuration](https://cloudbrothers.info/en/azure-persistence-azure-policy-guest-configuration/) - Persistence, Guest Configuration, Policy +- [Prevent deletion of resources with Azure Policy](https://gillianstravers.com/azure/prevent-deletion-of-resources-with-azure-policy/) - Resource Deletion, Prevention, Policy +- [Policy as Code: Using Azure Bicep to deploy Azure Policies](https://periwalmanish.wordpress.com/2022/08/13/policy-as-code-using-bicep-to-deploy-azure-policies/) - Policy as Code, Bicep, Deployment +- [Policy as Code: Using Modules and defining Custom Roles using Azure Bicep](https://periwalmanish.wordpress.com/2022/08/23/policy-as-code-using-modules-and-defining-custom-roles-using-azure-bicep/) - Policy as Code, Modules, Custom Roles +- [Security Posture Management With Azure Policy And Microsoft Defender For Cloud](https://securecloud.blog/2021/12/17/security-posture-management-with-azure-policy-and-microsoft-defender-for-cloud/) - Security Posture, Management, Defender for Cloud +- [Securing Azure PaaS Leveraging Azure Policies](https://medium.com/@sjimen11/securing-azure-paas-leveraging-azure-policies-8ea31387d45a) - PaaS, Security, Policies +- [Talking Azure Policy As Code On CtrlAltAzure Podcast](https://jloudon.com/cloud/Talking-Azure-Policy-as-Code-on-the-CtrlAltAzure-podcast/) - Policy as Code, Podcast, CtrlAltAzure +- [Terraforming Azure Policy](https://adinermie.com/terraforming-azure-policy/) - Terraforming, Policy, Azure +- [Test Azure Policies](https://checinski.cloud/test-azure-policies/) - Testing, Policies, Azure +- [Testing out Azure Policies Modify Effect](https://www.georgeollis.com/azure-policy-modify/) - Testing, Modify Effect, Policies +- [The A-Z of Azure Policy](https://michaeldurkan.com/2023/03/14/the-a-z-of-azure-policy/) - A-Z, Policy, Azure +- [Tips On Creating Azure Policies For Azure SQL Databases](https://cloudadministrator.net/2021/04/07/tips-on-creating-azure-policies-for-azure-sql-databases/) - SQL Databases, Policy Creation, Tips +- [Trigger An On Demand Azure Policy Compliance Evaluation Scan](https://www.danielstechblog.io/trigger-an-on-demand-azure-policy-compliance-evaluation-scan/) - Compliance Evaluation, On Demand, Policy +- [Trigger An On Demand Azure Policy Evaluation Scan At Management Group Scope](https://azsec.azurewebsites.net/2021/11/15/trigger-an-on-demand-azure-policy-evaluation-scan-at-management-group-scope/) - Evaluation Scan, Management Group, Policy +- [Trigger Azure Policy Scan Multiple Subscriptions](https://checinski.cloud/trigger-azure-policy-scan-multiple-subscriptions/) - Policy Scan, Multiple Subscriptions, Azure +- [Understanding Azure Policies With Visual Studio Code](https://zimmergren.net/understanding-azure-policies-with-visual-studio-code/) - Visual Studio Code, Policies, Understanding +- [Understanding Azure Policy For Regulatory Compliance](https://azuredays.com/2020/07/07/understanding-azure-policy-for-regulatory-compliance) - Regulatory Compliance, Policy, Understanding +- [Updated Azure Policy Definitions For Azure Diagnostics Settings Again](https://blog.tyang.org/2019/11/17/updated-azure-policy-definitions-for-azure-diagnostics-settings-again/) - Diagnostic Settings, Policy Definitions, Update +- [Use Azure Policies to Require Resource Tags with PowerShell](https://jeffbrown.tech/use-azure-policies-to-require-resource-tags-with-powershell/) - Resource Tags, PowerShell, Policies +- [Use Azure Policy to audit if Azure Arc-enabled servers meet security baseline requirements](https://azurearcjumpstart.io/azure_arc_jumpstart/azure_arc_servers/day2/arc_security_baseline/) - Security Baseline, Arc-enabled Servers, Policy +- [Using ARM Templates To Deploy Azure Policy Initiative](https://andrewmatveychuk.com/using-arm-templates-to-deploy-azure-policy-initiatives/) - ARM Templates, Deployment, Policy Initiative +- [Using Azure Policy To Audit Resource Group Resource Locks](https://adinermie.com/using-azure-policy-to-audit-resource-group-resource-locks/) - Audit, Resource Locks, Policy +- [Using Azure Policy to configure your resources](https://manbearpiet.com/posts/applying-guest-configuration-policy/) - Configuration, Resources, Policy +- [Using Azure policy to control workload identity federation](https://blog.identitydigest.com/azuread-mi-federate-policy/) - Workload Identity, Federation, Policy +- [Using Azure Policy To Implement Tagging Inheritance](https://archiechristopher.co.uk/2022/01/07/using-azure-policy-to-implement-tagging-inheritance/) - Tagging Inheritance, Implementation, Policy +- [Using VM applications and Azure Policy to deploy applications](https://www.georgeollis.com/using-vm-applications-and-azure-policy/) - VM Applications, Deployment, Policy +- [Using Conftest For Azure Policy For Kubernetes](https://www.danielstechblog.io/using-conftest-for-azure-policy-for-kubernetes/) - Conftest, Kubernetes, Policy +- [VNet peering using Azure Policy](https://rubberduckdev.com/azure-policy-vnet-peering/) - VNet Peering, Policy, Azure +- [Walkthrough Using Azure Policy To Audit And Enforce Compliance](https://azuredays.com/2020/07/09/walkthrough-using-azure-policy-to-audit-and-enforce-compliance/) - Audit, Compliance, Policy +- [What are Azure Policy Overrides?](https://www.georgeollis.com/what-are-azure-policy-overrides/) - Policy Overrides, Azure, Explanation +- [Writing A Custom Azure Policy](https://journeyofthegeek.com/2021/03/07/writing-a-custom-azure-policy/) - Custom Policy, Writing, Azure ### Community Tools -- [AzAdvertizer](https://www.azadvertizer.net/) -- [AzGovViz](https://github.com/JulianHayward/Azure-MG-Sub-Governance-Reporting) -- [Azure Policy Intellisense](https://marketplace.visualstudio.com/items?itemName=justin-grote.azure-policy-intellisense) -- [Azure Policy and Governance Pipelines Tasks](https://marketplace.visualstudio.com/items?itemName=razorspoint.rp-build-release-azurepolicy) -- [Cloud Guardrails](https://cloud-guardrails.readthedocs.io/en/latest/) -- [Search and find Azure Policy Aliases](https://policyalias.mats.codes) +- [AzAdvertizer](https://www.azadvertizer.net/) - Advertizer, Azure, Tool +- [AzGovViz](https://github.com/JulianHayward/Azure-MG-Sub-Governance-Reporting) - Governance, Reporting, Tool +- [Azure Policy Intellisense](https://marketplace.visualstudio.com/items?itemName=justin-grote.azure-policy-intellisense) - Intellisense, Policy, Tool +- [Azure Policy and Governance Pipelines Tasks](https://marketplace.visualstudio.com/items?itemName=razorspoint.rp-build-release-azurepolicy) - Governance Pipelines, Tasks, Policy +- [Cloud Guardrails](https://cloud-guardrails.readthedocs.io/en/latest/) - Guardrails, Cloud, Tool +- [Search and find Azure Policy Aliases](https://policyalias.mats.codes) - Policy Aliases, Search, Tool ### Community Repositories -- [andrewcluey/terraform-azurerm-policy-definition](https://github.com/andrewcluey/terraform-azurerm-policy-definition) -- [andrewmatveychuk/azure.policy](https://github.com/andrewmatveychuk/azure.policy) -- [azsec/azure-policy](https://github.com/azsec/azure-policy) -- [charotamine/azurepolicy_bicep](https://github.com/charotamine/azurepolicy_bicep) -- [charotamine/policytests](https://github.com/charotamine/policytests) -- [claranet/terraform-azurerm-policy](https://github.com/claranet/terraform-azurerm-policy) -- [faridabharmal/azuregovernance](https://github.com/faridabharmal/azuregovernance) -- [fawohlsc/azure-policy-samples](https://github.com/fawohlsc/azure-policy-samples) -- [fawohlsc/azure-policy-testing](https://github.com/fawohlsc/azure-policy-testing) -- [gettek/terraform-azurerm-policy-as-code](https://github.com/gettek/terraform-azurerm-policy-as-code) -- [globalbao/azure-policy-as-code](https://github.com/globalbao/azure-policy-as-code) -- [globalbao/terraform-azurerm-policy-exemptions](https://github.com/globalbao/terraform-azurerm-policy-exemptions) -- [jamesdld/azure-policies](https://github.com/JamesDLD/azure-policies) -- [jannemattila/azure-policy-evaluator](https://github.com/JanneMattila/azure-policy-evaluator) -- [jimgbritt/azurediagnosticspipeline](https://github.com/jimgbritt/azurediagnosticspipeline) -- [jimgbritt/azurepolicy](https://github.com/jimgbritt/azurepolicy) -- [john-joyner/azure-policy](https://github.com/john-joyner/azure-policy) -- [jtracey93/tf-az-dine-policy-assignment](https://github.com/jtracey93/tf-az-dine-policy-assignment) -- [julianhayward/azure-mg-sub-governance-reporting](https://github.com/julianhayward/azure-mg-sub-governance-reporting) -- [kudelskisecurity/azure-policy-tester](https://github.com/kudelskisecurity/azure-policy-tester) -- [mattfeltonma/azure-custom-policies](https://github.com/mattfeltonma/azure-custom-policies) -- [matthiasguentert/azure-naming-convention-initiative](https://github.com/matthiasguentert/azure-naming-convention-initiative) -- [ricmmartins/azure-governance-made-simple](https://github.com/ricmmartins/azure-governance-made-simple) -- [robinchapas/converttopolicy](https://github.com/robinchapas/ConvertToPolicy) -- [salesforce/cloud-guardrails](https://github.com/salesforce/cloud-guardrails) -- [stefanrothnet/azure-policy](https://github.com/stefanrothnet/azure-policy) -- [tyconsulting/azure.policy.monitor](https://github.com/tyconsulting/azure.policy.monitor) -- [tyconsulting/azurepolicy](https://github.com/tyconsulting/azurepolicy) -- [yangdeal/azure_policy_deployment](https://github.com/yangdeal/azure_policy_deployment) +- [andrewcluey/terraform-azurerm-policy-definition](https://github.com/andrewcluey/terraform-azurerm-policy-definition) - Terraform, Policy Definition, Repository +- [andrewmatveychuk/azure.policy](https://github.com/andrewmatveychuk/azure.policy) - Policy, Azure, Repository +- [azsec/azure-policy](https://github.com/azsec/azure-policy) - Policy, Azure, Repository +- [charotamine/azurepolicy_bicep](https://github.com/charotamine/azurepolicy_bicep) - Policy, Bicep, Repository +- [charotamine/policytests](https://github.com/charotamine/policytests) - Policy Tests, Repository, Azure +- [claranet/terraform-azurerm-policy](https://github.com/claranet/terraform-azurerm-policy) - Terraform, Policy, Repository +- [faridabharmal/azuregovernance](https://github.com/faridabharmal/azuregovernance) - Governance, Azure, Repository +- [fawohlsc/azure-policy-samples](https://github.com/fawohlsc/azure-policy-samples) - Policy Samples, Azure, Repository +- [fawohlsc/azure-policy-testing](https://github.com/fawohlsc/azure-policy-testing) - Policy Testing, Azure, Repository +- [gettek/terraform-azurerm-policy-as-code](https://github.com/gettek/terraform-azurerm-policy-as-code) - Terraform, Policy as Code, Repository +- [globalbao/azure-policy-as-code](https://github.com/globalbao/azure-policy-as-code) - Policy as Code, Azure, Repository +- [globalbao/terraform-azurerm-policy-exemptions](https://github.com/globalbao/terraform-azurerm-policy-exemptions) - Terraform, Policy Exemptions, Repository +- [jamesdld/azure-policies](https://github.com/JamesDLD/azure-policies) - Policies, Azure, Repository +- [jannemattila/azure-policy-evaluator](https://github.com/JanneMattila/azure-policy-evaluator) - Policy Evaluator, Azure, Repository +- [jimgbritt/azurediagnosticspipeline](https://github.com/jimgbritt/azurediagnosticspipeline) - Diagnostics Pipeline, Azure, Repository +- [jimgbritt/azurepolicy](https://github.com/jimgbritt/azurepolicy) - Policy, Azure, Repository +- [john-joyner/azure-policy](https://github.com/john-joyner/azure-policy) - Policy, Azure, Repository +- [jtracey93/tf-az-dine-policy-assignment](https://github.com/jtracey93/tf-az-dine-policy-assignment) - DINE Policy, Assignment, Repository +- [julianhayward/azure-mg-sub-governance-reporting](https://github.com/julianhayward/azure-mg-sub-governance-reporting) - Governance, Reporting, Repository +- [kudelskisecurity/azure-policy-tester](https://github.com/kudelskisecurity/azure-policy-tester) - Policy Tester, Azure, Repository +- [mattfeltonma/azure-custom-policies](https://github.com/mattfeltonma/azure-custom-policies) - Custom Policies, Azure, Repository +- [matthiasguentert/azure-naming-convention-initiative](https://github.com/matthiasguentert/azure-naming-convention-initiative) - Naming Convention, Initiative, Repository +- [ricmmartins/azure-governance-made-simple](https://github.com/ricmmartins/azure-governance-made-simple) - Governance, Azure, Repository +- [robinchapas/converttopolicy](https://github.com/robinchapas/ConvertToPolicy) - ConvertToPolicy, Azure, Repository +- [salesforce/cloud-guardrails](https://github.com/salesforce/cloud-guardrails) - Guardrails, Cloud, Repository +- [stefanrothnet/azure-policy](https://github.com/stefanrothnet/azure-policy) - Policy, Azure, Repository +- [tyconsulting/azure.policy.monitor](https://github.com/tyconsulting/azure.policy.monitor) - Policy Monitor, Azure, Repository +- [tyconsulting/azurepolicy](https://github.com/tyconsulting/azurepolicy) - Policy, Azure, Repository +- [yangdeal/azure_policy_deployment](https://github.com/yangdeal/azure_policy_deployment) - Policy Deployment, Azure, Repository ### Community Forums -- [Reddit - Azure Policy](https://www.reddit.com/search/?q=azure%20policy) -- [Stack Overflow - Azure Policy](https://stackoverflow.com/questions/tagged/azure-policy) +- [Reddit - Azure Policy](https://www.reddit.com/search/?q=azure%20policy) - Reddit, Policy, Forum +- [Stack Overflow - Azure Policy](https://stackoverflow.com/questions/tagged/azure-policy) - Stack Overflow, Policy, Forum