Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
884 questions
0 answers
An error on Microsoft Learn (lesson "Create Azure policies") ?
Hello, I thought a policy definition "describes the compliance confitions for a resource, and the actions to complete when the conditions are NOT met" (e.g., "the name of the VM does not follow the specified convention" (condition…
asked 2024-10-07T08:41:04.44+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(288, 89%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESP%3C/text%3E%3C/svg%3E)
SEREDA Patryk
0
Reputation points
asked 2024-10-07T08:41:04.44+00:00
SEREDA Patryk
0
Reputation points
1 answer
Standard Azure Naming policy creation
Microsoft support team is unable to solve the problem. { "properties": { "displayName": "Virtual Machine Naming Policy", "policyType": "Custom", "mode":…
asked 2024-10-04T14:45:16.4766667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(204.8, 38%, 29%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMN%3C/text%3E%3C/svg%3E)
Mohamed Nazeer
0
Reputation points
answered 2024-10-07T08:04:39.8166667+00:00
Stanislav Zhelyazkov
24,051
Reputation points MVP
0 answers
Despite creating an Activity alert in the Microsoft Defender portal, we are still not receiving any alerts.
Despite creating an Activity alert in the Microsoft Defender portal, we are still not receiving any alerts.
asked 2024-10-02T04:33:54.9766667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(137.6, 35%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAS%3C/text%3E%3C/svg%3E)
Akhila SR
0
Reputation points
commented 2024-10-07T03:46:53.7466667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(281.6, 17%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EGM%3C/text%3E%3C/svg%3E)
Givary-MSFT
32,581
Reputation points Microsoft Employee
1 answer
Can you link a log analytic workspace to a dedicated cluster by a policy?
We want to deploy a dedicated cluster and enforce people to be linked to this cluster with their LAW automatically. Is this possible to be done by a policy? Or is there a better "best practise" way of (automatically) linking workspaces to a…
asked 2024-10-04T07:21:32.11+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(92.8, 71%, 18%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EHT%3C/text%3E%3C/svg%3E)
Hoeneveld, T.A. (Tim)
50
Reputation points
answered 2024-10-06T10:05:20.1433333+00:00
Vinodh247
20,636
Reputation points
1 answer
Azure resource graph query to get azure policies by category
Azure resource graph query to get all azure policies by category (in an azure tenant )
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(96, 71%, 19%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMT%3C/text%3E%3C/svg%3E)
1 answer
Automated way to increase the resources limit in subscription.
Is it possible to increase the subscription limit by any automated way rather than the manual process ? I know the manual way to increase the limit but i wanted to know is there any automated way.
asked 2020-12-21T08:39:26.267+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(25.6, 76%, 12%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EM%3C/text%3E%3C/svg%3E)
Madhavi
1
Reputation point
commented 2024-10-05T19:46:34.4933333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(185.6, 68%, 27%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ETO%3C/text%3E%3C/svg%3E)
Toba Obiwale
0
Reputation points
1 answer
Azure Policy Questions
Hi, I am trying to understand the difference between a policy assignment with policies listed directly under the assignment, as opposed to using a defintion / initiative, and what are the pros and cons of each option. Any guidance much appreciated. Dave
asked 2024-10-04T08:39:21.7266667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(108.80000000000001, 80%, 20%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDO%3C/text%3E%3C/svg%3E)
Dave O'Donohoe
130
Reputation points
edited a comment 2024-10-04T15:33:47.0166667+00:00
Dave O'Donohoe
130
Reputation points
1 answer
Azure policy to deny public access when creating a storage account
I am trying to create a solution that will prevent the creation of storage account unless a private endpoint is in place. Its the section below I have used the built in policy definition in Azure, and I am still able to create a storage account with…
asked 2024-10-03T14:41:10.21+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(80, 39%, 17%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EM%3C/text%3E%3C/svg%3E)
MrFlinstone
581
Reputation points
commented 2024-10-04T13:03:46.17+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(265.6, 2%, 35%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EHB%3C/text%3E%3C/svg%3E)
Hari Babu Vattepally
0
Reputation points Microsoft Vendor
2 answers
One of the answers was accepted by the question author.
Automate Azure Backups for VM across multiple subscriptions
Hi Team, I am working for big health care organization. We have Azure landing zone deployed which has around 20 subscriptions. We are trying to automate the Backups for all the VM types deployed New VM from market place, Migrated and Custom Images…
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(35.2, 66%, 13%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ES%3C/text%3E%3C/svg%3E)
1 answer
One of the answers was accepted by the question author.
In Microsoft Defender for cloud I’m trying to enter an email but it gives me privilege error and I am Global Admin
Hi Team In Microsoft Defender for cloud I’m trying to enter an additional email addresses but it gives me privilege error and I am Global Admin Regards
asked 2024-10-04T07:56:59.46+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(224.00000000000003, 31%, 31%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESN%3C/text%3E%3C/svg%3E)
Sánchez, Alberto
40
Reputation points
accepted 2024-10-04T11:05:25.8133333+00:00
Sánchez, Alberto
40
Reputation points
1 answer
What is the KQL query to extract Azure policies by certain properties?
What is the KQL query in Azure to extract all policies by friendly name, resource type, compliance status, policy type, initiative type, whether it is custom or built-in, and date created?
asked 2024-10-03T18:39:22.8533333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(44.800000000000004, 72%, 14%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDA%3C/text%3E%3C/svg%3E)
Dev Anand
0
Reputation points
answered 2024-10-03T22:33:38.6833333+00:00
Luis Arias
6,796
Reputation points
0 answers
Deploying diagnostic settings through Azure Policy leaves them in a pending state
I'm following this article to create diagnostic settings for all our resources at a global scale. However, when the remediation task creates a deployment for the diagnostic settings, it seems like it gets stuck. The deployment appears completed, but the…
asked 2024-10-03T11:46:36.8966667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(48, 26%, 14%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EYS%3C/text%3E%3C/svg%3E)
Yuliyan Serbezki
0
Reputation points
asked 2024-10-03T11:46:36.8966667+00:00
Yuliyan Serbezki
0
Reputation points
0 answers
Azure Policy not working with Def. JIT (- Do not allow Any as source)
I am currently trying to prevent users from requesting Azure JIT VM access coming from the Source IP addresses "Any". According to this thread, https://learn.microsoft.com/en-us/answers/questions/846584/azure-vm-jit-do-not-allow-any-as-source ,…
asked 2024-09-23T07:36:48.7833333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(278.4, 14.000000000000002%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJE%3C/text%3E%3C/svg%3E)
Jara Entren
25
Reputation points
edited the question 2024-10-03T08:30:34.7133333+00:00
KapilAnanth-MSFT
45,111
Reputation points Microsoft Employee
0 answers
How to setup an Azure Alert to be triggered when our VM disks go below 10% free space
Hi, we would like some assistance to setup an Azure alert with correct "Measurement" and "Alert logic" values. We are using this query that brings us the result of all our servers with their disks free space. We would like to setup an…
asked 2024-10-02T13:46:41.2833333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(307.2, 21%, 39%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EGA%3C/text%3E%3C/svg%3E)
Ghulam Abbas
191
Reputation points
asked 2024-10-02T13:46:41.2833333+00:00
Ghulam Abbas
191
Reputation points
0 answers
Paginate List Query Results For Subscription Level Policy Assignment
Hi everyone, I’m having trouble using this service to get information about policy states. It seems to only return up to 1,000 entries per call, and the @odata.nextLink parameter mentioned in the docs always comes back as null. I tried adjusting the…
asked 2024-10-01T15:44:06.4+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(288, 61%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EGA%3C/text%3E%3C/svg%3E)
Gonzalo Avalos Ribas
0
Reputation points
edited the question 2024-10-01T15:47:52.3566667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(12.8, 76%, 11%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EV%3C/text%3E%3C/svg%3E)
VarunTha
8,220
Reputation points Microsoft Vendor
0 answers
How to upgrade package github.com/open-policy-agent/opa to version 0.68.0 or above?
Hello! We are using Azure Policy add-on in our AKS cluster and we would like to upgrade package github.com/open-policy-agent/opa to version 0.68.0 or above. The image mcr.microsoft.com/oss/open-policy-agent/gatekeeper. Namespace: gatekeeper-system. How…
asked 2024-09-27T11:59:52.1966667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(262.40000000000003, 0%, 35%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EIU%3C/text%3E%3C/svg%3E)
Igor Ussov (external)
0
Reputation points
asked 2024-09-27T11:59:52.1966667+00:00
Igor Ussov (external)
0
Reputation points
0 answers
Allow-Access-Control-Origin Error on Web App
Hey everyone. I may be missing something simple, but here's one for you guys! Turning on App Gateway WAF Policy with a custom rule for geo location match. Essentially just to deny any traffic outside of select countries. Without this WAF Policy turned…
asked 2024-09-24T19:45:46.7866667+00:00
Joseph Dutton
135
Reputation points
commented 2024-09-27T05:33:25.71+00:00
KapilAnanth-MSFT
45,111
Reputation points Microsoft Employee
1 answer
How to remove WAF policy safely.We have an AKAMAI device before the App GW and do not need WAF capability anymore.What is the safest way to do so.
How to remove WAF policy safely or disassociate WAF policy . We have an AKAMAI device before the App GW in our environment hence we do not need WAF capability anymore. What is the safest way to do so. Also can I do it via portal and if I am doing it via…
asked 2023-03-21T05:27:06.58+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(176, 43%, 27%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESM%3C/text%3E%3C/svg%3E)
Samar Masood Khan
20
Reputation points
commented 2024-09-26T11:27:17.2633333+00:00
KapilAnanth-MSFT
45,111
Reputation points Microsoft Employee
0 answers
I cant access my customers tenant because of a conditional acces policy called "phishing resistent mfa for admins"
I called microsoft yeserday, was rerouted 3 times before someone could create a ticket for me and said answer time was just a couple of hours and then the data protection team would call me. this "should" be a simple fix i tought, it is really…
asked 2024-09-24T06:47:35.9933333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(137.6, 9%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EFF%3C/text%3E%3C/svg%3E)
Frederik Franklin Klingenberg
0
Reputation points
edited the question 2024-09-24T07:50:05.1133333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(224.00000000000003, 86%, 31%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
AmaranS
6,415
Reputation points Microsoft Vendor
0 answers
Error assigning a policy using Azure powershell and Azure Cli
I'm trying to assign an initiative using Azure Cli or Azure powershell and I'm getting the following error New-AzManagementGroupDeployment -ManagementGroupId $managemenGroupId -Location $location -TemplateFile…
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(182.40000000000003, 52%, 27%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)