Code

Update to 1.3.0#33

Code

Merged

wanpengyang merged 113 commits intomaincds-snc/CanadaPubSecALZ:mainfrom update-to-1.3.0cds-snc/CanadaPubSecALZ:update-to-1.3.0Copy head branch name to clipboardApr 19, 2024

+6,101-269

Commits

Commits on Jan 21, 2022

• Diagnostic Settings Policies for PaaS services (Azure#143)

  Show description for fff245d
  SenthuranSivananthan

  authored
  fff245d

• Private Endpoint for App Service (Azure#144)

  hudua

  authored
  c71051b

Commits on Jan 22, 2022

• Flexible policy assignment scope (Azure#147)

  Show description for 73ce2eb
  SenthuranSivananthan

  authored
  73ce2eb

Commits on Jan 27, 2022

• Removed 'privatelink.monitor.azure.com' from Private DNS Zones (Azure#149)

  SlavaRoikhman

  authored
  82dd826

Commits on Jan 31, 2022

• Automation scripts for Azure DevOps onboarding (Azure#151)

  Show description for 09f09ed
  skeeler

  authored
  09f09ed

• Snapshot landing zone schema to v0.3.0 (Azure#152)

  SenthuranSivananthan

  authored
  61afd59

Commits on Feb 4, 2022

• Enhance PBMM policy assignment to disable diagnostic settings metrics (Azure#156)

  Show description for b628c68
  SenthuranSivananthan

  authored
  b628c68

Commits on Feb 7, 2022

• Issue Azure#157 - Update scripts documentation (Azure#158)

  Show description for d7d5257
  skeeler

  authored
  d7d5257

Commits on Feb 10, 2022

• Update Deployment Script's Azure CLI version to 2.32.0 (Azure#164)

  Show description for 209f61c
  SenthuranSivananthan

  authored
  209f61c

• Update DevOps Onboarding section of main readme (Azure#162)

  skeeler

  authored
  5104f39

• Repository clean up (Azure#165)

  Show description for 6061fa0
  SenthuranSivananthan

  authored
  6061fa0

Commits on Feb 17, 2022

• Linter: no-loc-expr-outside-params - ensure compliance (Azure#169)

  Show description for e71ed26
  SenthuranSivananthan

  authored
  e71ed26

Commits on Feb 18, 2022

• Support for Tag inheritance from Subscription to Resource Group (Azure#161)

  Show description for edabd87
  SenthuranSivananthan

  authored
  edabd87

Commits on Feb 22, 2022

• Instructions for Azure DevOps Environments (Azure#175)

  Show description for 488fc6e
  SenthuranSivananthan

  authored
  488fc6e

Commits on Feb 23, 2022

• Update create-pipelines.bat onboarding script to auto-provision environment (Azure#178)

  skeeler

  authored
  5d7eec3

• Update onboarding doc for logging & networking management group settings (Azure#177)

  Show description for 4dd1f4a
  SenthuranSivananthan

  authored
  4dd1f4a

Commits on Feb 26, 2022

• Snapshot JSON schemas to v0.4.0 (Azure#182)

  SenthuranSivananthan

  authored
  6b6ef29

Commits on Feb 27, 2022

• Update onboarding document

  Show description for 9a141f7
  

  autocloudarc

  and

  Preston K. Parsard

  authored
  9a141f7

• Configurable management group hierarchy (Azure#186)

  Show description for c62dcfc
  skeeler

  authored
  c62dcfc

Commits on Feb 28, 2022

• Show Variables fix (Azure#191)

  skeeler

  authored
  17846c4

Commits on Mar 1, 2022

• subscription(generic): add instructions for configuring parameters (Azure#193)

  autocloudarc

  authored
  5d33909

Commits on Mar 2, 2022

• Instructions for backfilling management group hierarchy (Azure#197)

  Show description for 5e7322e
  SenthuranSivananthan

  authored
  5e7322e

Commits on Mar 3, 2022

• Revise subscription deployment instructions (Azure#201)

  Show description for d6b1c08
  SenthuranSivananthan

  authored
  d6b1c08

• Ensure values from multiline variables are properly logged (Azure#202)

  Show description for 5753cf0
  SenthuranSivananthan

  authored
  5753cf0

Commits on Mar 5, 2022

• Fix pipeline scripts reference to subscription-ci (Azure#207)

  skeeler

  authored
  678355f

• Delete Lock for Log Analytics Workspace resource group (Azure#205)

  Show description for 81eccd1
  SenthuranSivananthan

  authored
  81eccd1

• Support Defender Plan for Cosmos DB (Azure#200)

  Show description for 27363b7
  SenthuranSivananthan

  authored
  27363b7

Commits on Mar 11, 2022

• fixing doc typo in hubnetwork-azfw (Azure#211)

  Show description for 30b9cc2
  

  SunChero

  and

  Adil Ha

  authored
  30b9cc2

Commits on Mar 12, 2022

• Backward compatibility when setting pipeline variables from management group hierarchy (Azure#213)

  SenthuranSivananthan

  authored
  97c2904

Commits on Mar 24, 2022

• Update OZ subnet name to App Management Zone (Azure#217)

  SenthuranSivananthan

  authored
  789b18a

• Document delete lock usage (Azure#216)

  Show description for 0538d4d
  SenthuranSivananthan

  authored
  0538d4d

• Add instructions for customizing policy set assignments (Azure#215)

  SenthuranSivananthan

  authored
  bf5e94b

• Fix formatting (Azure#218)

  SenthuranSivananthan

  authored
  2e5a56b

Commits on Mar 30, 2022

• Improve delete-management-groups.bat script (Azure#224)

  skeeler

  authored
  453a0f8

Commits on Mar 31, 2022

• Private DNS Policy - Change Cosmos DB namespace to Microsoft.DocumentDB (Azure#228)

  Show description for f25f957
  SenthuranSivananthan

  authored
  f25f957

• Flexible policy assignment parameters JSON files (Azure#222)

  SenthuranSivananthan

  authored
  0210df4

• Externalize Log Analytics Workspace parameters when loading pipeline variables (Azure#220)

  Show description for 6b36096
  SenthuranSivananthan

  authored
  6b36096

• Initial GC 30-day cloud guardrails compliance/guidance (Azure#226)

  Show description for 575440e
  ccmsft

  authored
  575440e

Commits on Apr 1, 2022

• Update networking documentation for generic subscription archetype (Azure#230)

  ghostme

  authored
  d2f959a

Commits on Apr 2, 2022

• Use built-in policy for Cosmos DB for Defender Plan (Azure#232)

  Show description for 3ce2cf8
  SenthuranSivananthan

  authored
  3ce2cf8

Commits on Apr 4, 2022

• Updating recommendations to reflect licensing reqs (Azure#229)

  ccmsft

  authored
  cb96311

Commits on Apr 5, 2022

• Fix order of platform-connectivity-hub-azfw-policy pipeline listed in run-pipelines.bat script Azure#233 (Azure#234)

  skeeler

  authored
  3259994

Commits on Apr 8, 2022

• PBMM & HITRUST/HIPAA policy update (Azure#238)

  SenthuranSivananthan

  authored
  cc5f017

• Migrate Logging configuration to JSON parameters file (Azure#236)

  SenthuranSivananthan

  authored
  bfe1f58

Commits on Apr 9, 2022

• Update azure-devops-pipelines.md (Azure#242)

  skeeler

  authored
  0e258f9

Commits on Apr 11, 2022

• Support logging infrastructure for multiple regions in same subscription (Azure#244)

  Show description for 1c37279
  SenthuranSivananthan

  authored
  1c37279

Commits on Apr 12, 2022

• Support multiple private dns zone configuration when updating private DNS Zones through Azure Policy (Azure#246)

  Show description for 700eb96
  SenthuranSivananthan

  authored
  700eb96

Commits on Apr 13, 2022

• Include new Databricks' log categories for diagnostic settings (Azure#248)

  Show description for 89613db
  SenthuranSivananthan

  authored
  89613db

Commits on Apr 20, 2022

• Azure Active Directory support for Synapse (Azure#259)

  mosharafMS

  authored
  38fc344

• Migrate Networking configuration to JSON parameters file (Azure#250)

  SenthuranSivananthan

  authored
  3d9c60d

• Revise subnet configuration for Generic Subscription archetype (Azure#252)

  SenthuranSivananthan

  authored
  7083377

• Revise subnet configuration for Machine Learning archetype (Azure#254)

  SenthuranSivananthan

  authored
  72fe50d

• Revise subnet configuration for Healthcare archetype (Azure#256)

  SenthuranSivananthan

  authored
  1ee5b9e

• Removed extra configuration files (Azure#260)

  SenthuranSivananthan

  authored
  3008353

Commits on Apr 21, 2022

• Update common.yml example (Azure#262)

  SenthuranSivananthan

  authored
  b33cd36

Commits on Apr 25, 2022

• Support for optional subnets in Machine Learning & Healthcare archetypes (Azure#264)

  SenthuranSivananthan

  authored
  2bc196a

• Organize deployment parameters for Hub Networking with Azure Firewall (Azure#265)

  SenthuranSivananthan

  authored
  d68824a

Commits on Apr 27, 2022

• Updated documentation (Azure#267)

  ghostme

  authored
  926521a

• Organize deployment parameters for Hub Networking with NVA (Azure#266)

  SenthuranSivananthan

  authored
  60f3b59

• Snapshot ARM parameters JSON schemas (Azure#268)

  SenthuranSivananthan

  authored
  3522571

Commits on Apr 29, 2022

• PowerShell deployment scripts (Azure#271)

  SenthuranSivananthan

  authored
  15c2847

Commits on Apr 30, 2022

• Powershell deployment script for archetypes (Azure#273)

  Show description for db098e1
  SenthuranSivananthan

  authored
  db098e1

Commits on May 2, 2022

• Deployment flow diagram (Azure#274)

  SenthuranSivananthan

  authored
  08d8f92

Commits on May 9, 2022

• GitHub workflow implementation (Azure#276)

  Show description for 1d8dbd7
  skeeler

  authored
  1d8dbd7

• Support schema validation (Azure#277)

  SenthuranSivananthan

  authored
  ce6c27f

• Add environment configuration override and protect sensitive parameters (Azure#280)

  skeeler

  authored
  a9c9419

Commits on May 10, 2022

• Pass-thru secure strings as-is until ready for use (Azure#281)

  SenthuranSivananthan

  authored
  799ad52

• Fix DeploySubscriptionIds parameter type casting (Azure#282)

  skeeler

  authored
  229b144

• Correct wiring of the subscriptions-ci pipeline and prompt for NVA firewall username & password (Azure#285)

  skeeler

  authored
  31e8d0a

• Support jobs in GitHub Actions (Azure#286)

  SenthuranSivananthan

  authored
  93d2f13

• Ensure multiple subscriptions can be moved to a management in parallel (Azure#288)

  Show description for c413307
  SenthuranSivananthan

  authored
  c413307

Commits on May 11, 2022

• Separate Azure Firewall Policy deployment switch & unique telemetry tracking for policy assignments (Azure#289)

  SenthuranSivananthan

  authored
  6a90a2f

Commits on May 15, 2022

• Disable metrics in diagnostic settings for AKS through Policy (Azure#295)

  SenthuranSivananthan

  authored
  31a214a

• Concurrent role deployment with PowerShell & GitHub Actions (Azure#299)

  SenthuranSivananthan

  authored
  c078a79

• Disable fail fast for matrix deployments (Azure#297)

  SenthuranSivananthan

  authored
  0ce5c1a

Commits on May 16, 2022

• Flexible policy deployment using PowerShell & GitHub Actions (Azure#300)

  SenthuranSivananthan

  authored
  c1a3b99

• Log Analytics solutions for SQL servers on machines (Azure#303)

  SenthuranSivananthan

  authored
  62adb00

Commits on May 17, 2022

• Serial defender plan deployments & revised resource/resource group names (Azure#307)

  SenthuranSivananthan

  authored
  6765c48

Commits on May 18, 2022

• Update resource group names for Logging & Networking (Azure#309)

  Show description for bce747c
  SenthuranSivananthan

  authored
  bce747c

Commits on May 19, 2022

• Add service health notification info (Azure#310)

  SenthuranSivananthan

  authored
  2b11801

Commits on May 27, 2022

• Reference the Guardrails Solution Accelerator for 30-day guardrail assessment (Azure#313)

  igomaa

  authored
  e9a0962

Commits on Jun 24, 2022

• Fix typo in onboarding guidance (Azure#320)

  Ifyagolu

  authored
  8fc587a

Commits on Jul 18, 2022

• Update machinelearning.md (Azure#327)

  sabyadg

  authored
  a4e53ff

Commits on Jul 20, 2022

• Resolve linter warning: prefer-unquoted-property-names (Azure#322)

  SenthuranSivananthan

  authored
  60198bc

• Add missing log categories in diagnostic settings for Azure Firewall (Azure#324)

  SenthuranSivananthan

  authored
  a7f521d

Commits on Aug 8, 2022

• Support azkms.core.windows.net and IPs in firewall allow list (Azure#329)

  SenthuranSivananthan

  authored
  c2afa0d

Commits on Aug 17, 2022

• Support data collection rule (Azure#331)

  SenthuranSivananthan

  authored
  e069a4b

• Network security group support for private endpoints subnet (Azure#333)

  SenthuranSivananthan

  authored
  2a6042d

• Suppress false positive linter warning: secure-secrets-in-params (Azure#335)

  SenthuranSivananthan

  authored
  db52627

• Update diagnostic settings profile name (Azure#337)

  SenthuranSivananthan

  authored
  e5fe399

• Revised Event Hub Diagnostic Settings policy (Azure#339)

  SenthuranSivananthan

  authored
  5851a09

Commits on Sep 1, 2022

• Version August 2022 schema changes (Azure#342)

  skeeler

  authored
  b8a9bc9

Commits on Oct 14, 2022

• Update CODEOWNERS (Azure#344)

  Show description for c714e65
  skeeler

  authored
  c714e65

Commits on Dec 1, 2022

• Add Barry to code owners list (Azure#346)

  skeeler

  authored
  12cd557

• Update hubnetwork-azfw.md (Azure#345)

  Show description for e44c7ea
  

  obay

  and

  tredell

  authored
  e44c7ea

Commits on Feb 6, 2023

• Updated documents, from docs.microsoft.com - to Learn. (Azure#350)

  Show description for 0fa01e8
  lukemurraynz

  authored
  0fa01e8

Commits on Feb 24, 2023

• Fixed Linter warnings & build errors (Azure#354)

  Show description for 5337654
  tredell

  authored
  5337654

Commits on Mar 3, 2023

• Identity Archetype (Azure#359)

  Show description for f13f6ec
  tredell

  authored
  f13f6ec

Commits on Mar 13, 2023

• Bug fixes - network routing & ADO Identity Pipelines (Azure#362)

  Show description for 5680e65
  tredell

  authored
  5680e65

Commits on Mar 16, 2023

• Update DDoS.bicep (Azure#363)

  Show description for 674f6cb
  ylepine

  authored
  674f6cb

Commits on Apr 25, 2023

• Update identity.md (Azure#365)

  Show description for 5830bcb
  DavidChristiansen

  authored
  5830bcb

Commits on Jul 10, 2023

• Scripts to generate config from template, support JSON config intellisense in editors, fix bugs in deployment scripts (Azure#379)

  Show description for db45632
  skeeler

  authored
  db45632

Commits on Mar 26, 2024

• update to 1.3.0

  Show description for a10ba08
  wanpengyang

  committed
  a10ba08

• extra empty line in the upstream

  wanpengyang

  committed
  61638d6

• comma everytime...

  wanpengyang

  committed
  28e95e9

Commits on Apr 12, 2024

• no need for testing

  wanpengyang

  committed
  52278e6

• test

  wanpengyang

  committed
  bea0bf3

• Revert "no need for testing"

  Show description for 80baaf8
  wanpengyang

  authored
  80baaf8

• Revert "test"

  Show description for 48e664f
  wanpengyang

  authored
  48e664f

• plan

  wanpengyang

  authored
  9e4a89d

Commits on Apr 17, 2024

• add cdssnc-main configs

  wanpengyang

  authored
  de55b4c

• add default environmentName

  wanpengyang

  authored
  c8b29af

• fix typo

  wanpengyang

  authored
  8949f5d