Skip to content

PSrule not using local rules in Azure pipeline #2546

Answered by BernieWhite
bobanda87 asked this question in Q&A
Discussion options

You must be logged in to vote

@bobanda87 The suppression group only applies if you are using an automation account name that contains alz-automation-account. Looks like you are using the name SB-automation-account instead, which won't match with this condition.

You could update the suppression group to ignore all automation accounts:

# Synopsis: Ignore automation account audit diagnostic logs are enabled as these are covered by DINE policies in ALZ
apiVersion: github.com/microsoft/PSRule/v1
kind: SuppressionGroup
metadata:
  name: ALZ.DiagLogForAutomation
spec:
  rule:
  - PSRule.Rules.Azure\Azure.Automation.AuditLogs
  - PSRule.Rules.Azure\Azure.Automation.PlatformLogs
  if:
    allOf:
    - type: '.'
      in:
      - 

Replies: 1 comment 4 replies

Comment options

You must be logged in to vote
4 replies
@bobanda87
Comment options

@bobanda87
Comment options

@BernieWhite
Comment options

Answer selected by bobanda87
@bobanda87
Comment options

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Category
Q&A
Labels
None yet
2 participants