Azure Policy

Same policy have different behavior in azure apim

I have an Azure API Management policy that displays a warning when saved, but it functions correctly works for my needs. But some clients encounter errors when saving, such as in the policy snippet below. <set-variable name="labels"…

How to exclude VM auto-shutdown from Tag policy

I recently created policies to enforce the creation of certain tags on new Azure resources. Now when I try to enable auto-shutdown on an existing VM that is otherwise compliant with the tag policy I get an error:  Schedule failed to update…

MONITOR PIPELINE ACTIVITY

Hi, I'm working on monitoring the success or failure status of AML jobs on Log Analytics. However, I don't know which tables in Log Analytics contain logs of AML jobs. I followed this documentation…

I have student account and this is for my practices but currently disabled and this can not reactivate what can I do

I face Issue about two or more than two months

Deploy Azure Landing Zone via Bicep Accelerator without Azure Subscriptions

Hey folks! Greetings! We're aiming to deploy Azure landing zones within our Azure tenancy and have been following this helpful documentation: https://github.com/Azure/ALZ-Bicep/wiki/DeploymentFlow So far, we've successfully created the Management Groups…

Azure Policy for enabling diagnostic settings for WebApp/Function App - No resources remediated

I am working in an existing Azure environment where there is no governance and I am in the process of creating Azure Policies. Currently I am working on creating Azure Policy to enable Diagnostic settings for Azure Web App, Azure Function App and Web…

The policy effect is missing the property 'details' or the property 'details' cannot be parsed.

Hi folks, I am trying to edit an existing DeployIfNotExists policy to Append but getting below error. "Creating policy assignment 'siem-policy-enable_logging_Logic_Apps-Append' in 'Azure for Students' failed. Reason: The policy definition…

Is there any way to change reference id for built in policy?

Azure deny policy not working correctly

Hi, Currently I am trying to create various policies. One of those is to allow the creation of a storageAccount but disallow the creation of Queues. The policy is deployed through the use of a Bicep template: resource policyBlockResourceTypes…

Azure policy for Function App is targeting Logic App (standard)

Hi folks, Hope you are doing well! I have created an Azure policy to deploy diagnostic settings (to send FunctionAppLogs to LAW) to Azure function apps. I have used resource type "Microsoft.Web/sites" to target resources but it is targeting…

Azure AD - Security/Named Locations

I don't see Hawaii in the list for Named Locations inside of Security of Azure AD, neither I see Alaska. Are these two included as United States? I see Puerto Rico separated. If I create a conditional access based on location and add United States, if…

Azure Policy: Inheriting a Tag and Its Value from Subscription to Resource Groups

Is it possible to create an Azure policy that can automatically inherit a tag and its value (no matter what the value are) from the subscription to the resource group? The tag is always the same, for instance, Application, but the value can change…

Policy to stream subscription level logs to an event hub

Hi all, We're using a built-in policy on a top management group to apply a diagnostic setting to all subscriptions to stream activity logs to a specified log analytics workspace. We have a requirement to stream the logs to an specified event hub also.…

az confcom acipolicygen -a ./template.json --print-policy --debug

The docker is running but still see docker process not found running the above command docker.utils.config: Trying paths: ['/Users/user1/.docker/config.json', '/Users/user1/.dockercfg'] docker.utils.config: Found file at path:…

Require a tag and its value on resources

To Whom Can assist: Using the "Require a tag and its value on resources" policy, I am trying to enforce requiring Tags on resource groups and resources. However how can I create a custom policy that would ensure that I can have multiple…

Azure Policy: check subscription role assignments

Hi everyone We have different types of users in our Azure AD. Only a certain subset of them are allowed to administer Azure resources. Those all start with "ACO" or "ACA". We now wish to create an Azure Policy that checks whether only…

What is guest configuration extension in azure

Hi Team, We are geeting Microsoft defender for cloud recommendation for enabling the Guest configuration extension. Can someone explain the precise use of the Guest configuration extension and why we should use it? How to configure from the Azure portal

How to reset Owner Account password for old Azure account which does not have password reset policy set

Hi All, I am working on resetting password for Cloud Owner account and while doing that I get message that the account does not have "reset password policy setup". I am not sure who did the setup for this account, but it is setup in a very odd…

Custom policy export feature on portal.

Hi , so I am trying find out if the EXPORT POLICY feature that used to be available on the Azure portal was removed? I have use it a while back but I don't see that option on there any more .

Azure arc machine configuration deployment error

Hello I am attempting to deploy sample machine configuration for an Azure arc machine resource following the steps mentioned in https://learn.microsoft.com/en-us/azure/governance/machine-configuration/how-to/develop-custom-package/overview except for…