azurepolicy | This repository contains sample Azure Policy | Azure library

by tyconsulting PowerShell Version: Current License: MIT

X-Ray Key Features Code Snippets Community Discussions(5)Vulnerabilities Install Support

kandi X-RAY | azurepolicy Summary

azurepolicy is a PowerShell library typically used in Cloud, Azure applications. azurepolicy has no bugs, it has no vulnerabilities, it has a Permissive License and it has low support. You can download it from GitHub.

This repository contains sample Azure Policy I shared on my blog Feel free to submit PR if you see any issues or potential update.

Support

Quality

Security

License

Reuse

Support

azurepolicy has a low active ecosystem.

It has 125 star(s) with 131 fork(s). There are 20 watchers for this library.

It had no major release in the last 6 months.

There are 3 open issues and 9 have been closed. On average issues are closed in 374 days. There are no pull requests.

It has a neutral sentiment in the developer community.

The latest version of azurepolicy is current.

Quality

azurepolicy has 0 bugs and 0 code smells.

Security

azurepolicy has no vulnerabilities reported, and its dependent libraries have no vulnerabilities reported.

azurepolicy code analysis shows 0 unresolved vulnerabilities.

There are 0 security hotspots that need review.

License

azurepolicy is licensed under the MIT License. This license is Permissive.

Permissive licenses have the least restrictions, and you can use them in most projects.

Reuse

azurepolicy releases are not available. You will need to build from source code and install.

Top functions reviewed by kandi - BETA

kandi's functional review helps you automatically verify the functionalities of the libraries and avoid rework.
Currently covering the most popular Java, JavaScript and Python libraries. See a Sample of azurepolicy

Get all kandi verified functions for this library.

azurepolicy Key Features

No Key Features are available at this moment for azurepolicy.

azurepolicy Examples and Code Snippets

No Code Snippets are available at this moment for azurepolicy.

Community Discussions

Trending Discussions on azurepolicy

Create AKS Cluster with Application Gateway Ingress Add-on via Bicep Template

Azure Key Vault using manage identity in AKS

Use User assigned identity to AKS cluster using ARM template

Error while deploying Azure Json policy using powershell

Azure Policy to restrict role based access control(IAM) to users at Resource group level in Azure

QUESTION

Create AKS Cluster with Application Gateway Ingress Add-on via Bicep Template

Asked 2022-Mar-28 at 21:01

I was following this tutorial to setup AKS with Application Gateway Ingress Controller.

I am wondering what is the equivalent of this Azure CLI Command using Bicep Templates?

...

ANSWER

Answered 2022-Mar-28 at 21:01

You can use this template as starter: https://github.com/Azure/azure-quickstart-templates/blob/91da267dce8691485d916f7315a3fe6ffcee21aa/quickstarts/microsoft.network/aks-application-gateway-ingress-controller/azuredeploy.json#L1797

It's ARM, but you can easily transform it to Bicep, something like:

Source https://stackoverflow.com/questions/71590613

QUESTION

Azure Key Vault using manage identity in AKS

Asked 2021-Sep-18 at 18:01

I am deploying in Azure AKS a regular deployment and i want to use keyvault to store my secrets to get access to a database.

This is my deployment file:

...

ANSWER

Answered 2021-Sep-18 at 18:01

I would like to know if when I create a new AKS cluster with the option "System-assigned managed identity" enabled a new "Managed Identity" is automathycally created?

I am asking this because I am not using any other "Managed Identity" but the one that I created manually.

These are the steps followed:

Create a new "Managed Identity"
In "Managed Identity" - "Access Control (IAM)" or "Azure role assignments" i don´t have permissions to add any role so i left it as default.
Create the "Key vault" and add a couple of "Secrets".
In "Key Vault" - "Access Policy" add a new access policy for the "Managed Identity" created and also a new access policy for the agent pool "SonarQubeCluster-agentpool"

When i check "AKSclusterName"-> "Properties" -> and click on "MC_xx_AKSclusterName_southcentralus" it seems that i do not have permissions as i get this message "You do not have authorization to access this resource."

In case that it helps to understand a little bit the issue i attched the logs from:

az aks show -g RG -n SonarQubeCluster

Source https://stackoverflow.com/questions/69143067

QUESTION

Use User assigned identity to AKS cluster using ARM template

Asked 2021-Jan-05 at 10:27

I want to deploy AKS cluster with User Assigned Identity. I have created the User assigned managed Identity before the cluster creation and pass this as a parameter. However, When I use the same in the ARM template, below is the observation:

If the 'Identity" is 'SystemAssigned' -> The deployment will be successful
If the 'Identity is 'UserAssigned' and provide the Resource ID for UserAssignedIdentity, the deployment fails telling that the 'servicePrincipalProfile' is not provided.
If the 'Identity is 'UserAssigned' and 'servicePrincipalProfile' is provided ->Deployment is successful, but when I query the cluster for its Identity, the UserAssignedIdentity details are blank.

ARM Template reference: https://docs.microsoft.com/en-us/azure/templates/microsoft.containerservice/managedclusters#ManagedClusterServicePrincipalProfile

Template part that i am updating:

...

ANSWER

Answered 2021-Jan-05 at 10:14

as far as I can tell that is correct (almost), but you cannot use parameters for property names in arm templates, so you'd have to pre-render the template.

Source https://stackoverflow.com/questions/65575794

QUESTION

Error while deploying Azure Json policy using powershell

Asked 2020-Oct-21 at 07:36

I am trying to create a policy for Azure CIS, and getting the following error when I attempt to deploy it via powershell on the management group level - im trying to figure out what is missing as it says invalid template.

It looks like the error is related to something to do with the scope, but not sure what exactly is going on:

...

ANSWER

Answered 2020-Oct-20 at 06:30

You are deploying the ARM template to a management group, but you are referencing the ARM template subscription() function. The subscription() function is only valid when deploying to a subscription or resource group. When deploying to a management group then there is no subscription that could be referenced.

To resolve this you need to deploy this policy to a subscription, not to a management group.

Source https://stackoverflow.com/questions/64430007

QUESTION

Azure Policy to restrict role based access control(IAM) to users at Resource group level in Azure

Asked 2020-Jul-24 at 00:46

We were trying to implement a policy in azure to restrict role based assignment. We referenced below github policy, but during testing we observed it's not evaluating the roledefinitionIds defined in the parameter.

https://github.com/Azure/azure-policy/blob/master/samples/Authorization/allowed-role-definitions/azurepolicy.json

Tested with below roleIDs parameter -

b24988ac-6180-42a0-ab88-20f7382dd24c (Contributor Role)

acdd72a7-3385-48ef-bd42-f606fba81ae7 (Reader Role)

Ideally, it should whitelist the role IDs defined in the parameter, and deny the role assignment for other role IDs. But for some reason, during evaluation Azure policy service is not taking into account those role IDs defined in the parameter and instead restricting role based assignment for all the roles. Need help in troubleshooting this.

...

ANSWER

Answered 2020-Jul-24 at 00:46

You may input an invalid id. A valid Role definition id look like:

Source https://stackoverflow.com/questions/63039571

Community Discussions, Code Snippets contain sources that include Stack Exchange Network

Vulnerabilities

No vulnerabilities reported

Install azurepolicy

You can download it from GitHub.

Support

For any new features, suggestions and bugs create an issue on GitHub. If you have any questions check and ask questions on community page Stack Overflow .

Find more information at: