Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Updated the known issues in two places. #1184

Merged
merged 1 commit into from
Aug 3, 2023
Merged

Conversation

sehoff16
Copy link
Contributor

The following resource types have no LIST calls and therefore cannot be used in the If-Section of Policies with type "Audit" or "Deny" for example:

  • Microsoft.Web/sites/sourcecontrols
  • Microsoft.Web/sites/slots/sourcecontrols
  • Microsoft.Web/sites/privateaccess

The VM property /storageProfile.osDisk.osType is only present in GET calls to virtualManchines. That is a common pitfall for customers using Azure Policy because greenfield remediation won't work. only brownfield does.

@robga robga requested a review from kenieva July 26, 2023 19:05
@robga
Copy link
Collaborator

robga commented Jul 26, 2023

@kenieva Could you take a look at this PR?

@kenieva
Copy link
Collaborator

kenieva commented Jul 26, 2023

@sehoff16 do you confirmation from the Policy engineering team or support team that these are known limits

@sehoff16
Copy link
Contributor Author

@kenieva yes, I had discussed it with Daniel.
For #1: I have done a few tests on this and I had also verified the API tree for App Services (left hand side here: https://learn.microsoft.com/en-us/rest/api/appservice/web-apps/list). There are no LIST APIs for those resource types and Azure Policy doesn't detect these types in LIST calls either.

For #2: The osType problem is very well known. So I am confident on this one as well :-).

@robga robga merged commit ffcdf20 into Azure:master Aug 3, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants