Azure Governance
Azure Governance is a portfolio of platform capabilities that helps customers address the need for control at scale without sacrificing developer agility. This includes services like Azure Policy, Azure Blueprints, Azure Resource Graph & Management Groups.
More details about the services are available in the Azure Governance documentation. If you have a technical issue, please open a post on the developer forums through Stack Overflow.
Products that we listen to in this space include: Azure Policy, Azure Blueprints, Azure Resource Graph, Azure Subscriptions and Azure Management Groups
-
Support query Virtual Machines by state
Ability to query Virtual Machine resource type by state of the VM.
6 votes -
Support using Azure Blueprints without requiring Managment Groups
For customers like us not using Management Groups it is hard to try/use Azure Blueprints.
5 votesWe are working on changes to allow you to save the Blueprint definition to the subscription and assign it to that same subscription.
-
Azure Policy template for all options available in the Azure portal
Allow Azure Policies to be created by having a "generate policy" option available next to each option available in the Azure portal. Every configuration item should have the ability to be created as a policy and making this easy through the portal for each Azure component and option would make it easy to manage configuration compliance.
4 votes -
Azure Blueprints ARM Template Support
The ability to create an Azure Blueprint with an ARM Template. Additionally the ability to export Azure Blueprints as an ARM Templates. That way we can use them in a more repeatable fashion and store our definitions as IaC and deploy them with our existing deployment pipelines.
3 votes -
Azure Policy template for auditing/restricting public blob sharing
Currently, Azure storage allows for the public sharing of blobs. It would be great to be able to use Azure policy to detect (and remediate) this feature.
3 votes -
Azure Policy Template to audit/enforce Azure Backups on VMs
Would love to get a pre-made Azure policy template to audit/enforce Azure Backups to ensure servers are not missed.
3 votes -
Allow blueprints to register services within subscriptions
Currently the only way to register all services for a subscription, if the users dont have owner or contributor roles on them, is to run a shell command for every single subscription to register all services. Being able to do this within a blueprint would save a great amount of time when building out tenants.
2 votes -
Show Azure Policy Definition parameters on a separate tab
In a lot of situations you are only interested in viewing initiative definitions and definition parameters, not editing them.
Showing definition parameters on a separate tab would save a lot of time.2 votes -
1 vote
Hi,
This is actually already in progress. It’s likely to be done in the next two weeks.
-
Support history for resources
For scenarios where we need the resources to be synced into an external store, we want the history so that I don't need to scan all the resources again.
1 vote -
Get policy state return all objects
When getting policy state it only returns non-compliant objects. If the results returned all objects it would be easier to get an overview of compliance status for the environment.
1 vote -
JSON object support in parameters to arm templates
I'm using json objects to pass things like subnet configurations, tags and nsg rules into a vnet template. When I add a artificat the GUI only supports string/integers as parameters. My suggestion is to make it possible to upload a complex parameter file in the same way as the template is added. That way I won't need to "dumb down" my parameter files and hard code things in my templates. I would then also have the option to use string parameters for simple templates and object for more complex ones when I add them to blueprints.
1 vote -
Azure Policy based on industry governance/compliance frameworks
It would be helpful to take some of the control mapping from blueprints against industry frameworks such as PCI-DSS/NIST/etc and allow you to report compliance against those controls for each of the Azure services that exist in your environment.
Integrating something like cloudsecurityalliance.org control matrix or unifiedcompliance.com would be very helpful.
1 vote
- Don't see your idea?