Azure built-in compliance standard for ISO 27001:2022
Is it planned to offer the compliance standard for ISO 27001:2022 y Azure regulation compliance initiatives?
Azure Policy
Microsoft Azure with PDPL
I am planning to start using Microsoft Azure for data storage. However, before proceeding, I need to confirm whether Microsoft Azure is compliant with the Saudi Personal Data Protection Law (PDPL). Additionally, if possible, could you provide a…
Azure Policy
How can I limit an application access to view only a subset of the users in Microsoft Graph API, MS Teams endpints?
What are the methods to restrict an application, that is using the Microsoft Graph API to fetch users conversations, access so that it can only view data of Microsoft Teams endpoints for a specific subset of users, ?
Azure Policy
Microsoft Security | Microsoft Graph
Microsoft Teams | Microsoft Teams for business | Other
Updating Azure Policy for Latest Ubuntu Version Support
How can the following built-in Azure policy configure linux virtual machines to run azure monitor agent with user-assigned managed identity-based authentication be modified to include the latest Ubuntu release 24-04-LTS as a replacement for Ubuntu…
Azure Policy
What is the preferred way to do ongoing Azure Policy remediations?
I know remediations tasks only run once, and one can create multiple tasks over time to bring resources back into compliance. Is there any preferred pattern to automate this? The docs mention routing state changes to Azure Event Grid, but I wondered if…
Azure Policy


Azure initiative for ISO 27001:2022
We have to implement ISO 27001:2022 at Azure Switzerlan. Is there an azure initiative for ISO 27001:2022? There is currently one for ISO27001:2013. Does anyone know what should be changed for 27001:2022?
Azure Policy

How to block a normal user to create subscription in MCA?
Customer would like to block the subscription creation for normal user (such Azure subscription, MSDN subscription, Free trail subscription...etc), only the admin user can create it. In EA, they can apply the policy in the EA portal --> Enrollment,…
Azure Policy
Azure Policy for SQL Extension on All VMs
Seeking assistance with Azure Policy that applies the SQL Extension to all virtual machines. Currently facing difficulty locating the appropriate policy. Any guidance or examples would be appreciated.
Azure Policy
Require a tag on secret creation using Azure Policy
Background I want to make an Azure Policy that requires a tag to be created for every newly created secret. What I tried so far I made a new policy by copying the pre-existing Azure Policy Require a tag on resources and changed it to only apply to…
Azure Policy
How to convert existing API Management named values from Secret type to Key Vault reference
I have received Azure Advisor recommendations regarding API Management security enhancement, specifically stating that 'API Management secret named values should be stored in Azure Key Vault.' In our organization, we have multiple API Management…
Azure Key Vault
Azure API Management
Azure Policy
Azure Resource Graph (ARG) Query to List All Failed Policy Deployments
When using Azure Policy, in particular a policy with Deploy If Not Exist (DINE), naturally the policy will try to remediate anything that doesn't align to the policy definition. However, if there is something that prevents the Policy Deployment from…
Azure Policy


Azure: How to Duplicate a Policy Definition with Metadata?
0 I'm trying to duplicate a policy definition along with its metadata in Azure Policy, specifically for NIST SP 800 171. While I can do this through the portal UI, it doesn't duplicate the entire metadata. For instance, the original policy initiative for…
Azure Policy
Why am I not able to access my azure account even I've used my college id?
I am applying for azure free $100 credit with student email but i am geting error I am trying to avail free azure account benefits as a part with my new student email id. But azure shows me that i am not eligible for azure free account. This is the first…
Azure Policy
Is it possible to enforce a Resource Naming Convention using a RegEx from an Azure Policy.
Is it possible to enforce a required resource naming convention using a RegEx from an Azure Policy.
Azure Policy

I have created a azure policy to validate the name field for resource group objects
I have created a simple azure policy to validate the name field for azure resource group name when i validate the regex online it works fine { "mode": "All", "policyRule": { "if": { …
Azure Policy
Dynamic 'kid' Usage in Azure APIM Validate-JWT Policy
We currently use hardcoded exponent and modulus values within the
Azure API Management
Azure Policy
I want to add a policy using Azure policy that ensures that anonymous users cannot login or see my Azure storage. I'm getting an error.
I want to add a policy using Azure policy that ensures that anonymous users cannot login or see my Azure storage. I'm getting an error when using the JSON script that help tells me to use.
Azure Policy
Unable to make the policy "An activity log alert should exist for specific administrative operations" compliance
Hello All, We have applied Azure CIS Azure Foundations v2.1.0 Regulatory Compliance on our subscription. Some of the policy among the initiative is not getting compliance, Below is the initiative for the NSG. I have created alert for the NSG creation…
Azure Policy
Azure policy to allow tags with certain names (value doesn't matter)
Hi everyone, I have a list of allowed tags, I don't mean the value that the tag contains but only the name of the tag. The purpose of this is that all the tenant's resources only have tags that are included in this list. Because of this I need a policy…
Azure Policy
An activity log alert should exist for specific Security operations : Wrong category in the rules sec
Hello Team, I Have assigned policy CIS Microsoft Azure Foundations Benchmark v2.0.0 to my subscription. I have created alerts for the required policy but still it showing non compliance. Upon further researching it seems there is some bug in the Policy…