Update Library Templates (automated)

Azure · Aug 29, 2024 · 423f53b · 423f53b
1 parent e4850a2
commit 423f53b
Show file tree

Hide file tree

Showing 6 changed files with 37 additions and 13 deletions.
diff --git a/...es/lib/policy_set_definitions/policy_set_definition_es_deploy_private_dns_zones.tmpl.json b/...es/lib/policy_set_definitions/policy_set_definition_es_deploy_private_dns_zones.tmpl.json
@@ -1430,13 +1430,13 @@
         "policyDefinitionReferenceId": "DINE-Private-DNS-Azure-Arc",
         "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/55c4db33-97b0-437b-8469-c4f4498f5df9",
         "parameters": {
-          "privateDnsZoneIdForGuestConfiguration": {
+          "privateDnsZoneIDForGuestConfiguration": {
             "value": "[parameters('azureArcGuestconfigurationPrivateDnsZoneId')]"
           },
-          "privateDnsZoneIdForHybridResourceProvider": {
+          "privateDnsZoneIDForHybridResourceProvider": {
             "value": "[parameters('azureArcHybridResourceProviderPrivateDnsZoneId')]"
           },
-          "privateDnsZoneIdForKubernetesConfiguration": {
+          "privateDnsZoneIDForKubernetesConfiguration": {
             "value": "[parameters('azureArcKubernetesConfigurationPrivateDnsZoneId')]"
           },
           "effect": {

diff --git a/...s/archetypes/lib/policy_set_definitions/policy_set_definition_es_enforce_backup.tmpl.json b/...s/archetypes/lib/policy_set_definitions/policy_set_definition_es_enforce_backup.tmpl.json
@@ -63,7 +63,7 @@
           "effect": {
             "value": "[parameters('effect')]"
           },
-          "CheckLockedImmutabiltyOnly": {
+          "checkLockedImmutabiltyOnly": {
             "value": "[parameters('checkLockedImmutabilityOnly')]"
           }
         },

diff --git a/...lib/policy_set_definitions/policy_set_definition_es_enforce_guardrails_keyvault.tmpl.json b/...lib/policy_set_definitions/policy_set_definition_es_enforce_guardrails_keyvault.tmpl.json
@@ -8,7 +8,7 @@
     "displayName": "Enforce recommended guardrails for Azure Key Vault",
     "description": "Enforce recommended guardrails for Azure Key Vault.",
     "metadata": {
-      "version": "2.0.0",
+      "version": "2.1.0",
       "category": "Key Vault",
       "source": "https://github.com/Azure/Enterprise-Scale/",
       "alzCloudEnvironments": [
@@ -236,8 +236,11 @@
         "type": "string",
         "defaultValue": "Disabled",
         "allowedValues": [
+          "audit",
           "Audit",
+          "deny",
           "Deny",
+          "disabled",
           "Disabled"
         ]
       },

diff --git a/...b/policy_set_definitions/policy_set_definition_es_enforce_guardrails_kubernetes.tmpl.json b/...b/policy_set_definitions/policy_set_definition_es_enforce_guardrails_kubernetes.tmpl.json
@@ -8,7 +8,7 @@
     "displayName": "Enforce recommended guardrails for Kubernetes",
     "description": "This policy initiative is a group of policies that ensures Kubernetes is compliant per regulated Landing Zones.",
     "metadata": {
-      "version": "1.0.0",
+      "version": "1.1.0",
       "category": "Kubernetes",
       "source": "https://github.com/Azure/Enterprise-Scale/",
       "alzCloudEnvironments": [
@@ -81,26 +81,35 @@
         "type": "string",
         "defaultValue": "Deny",
         "allowedValues": [
+          "audit",
           "Audit",
+          "deny",
           "Deny",
+          "disabled",
           "Disabled"
         ]
       },
       "aksPrivEscalation": {
         "type": "string",
         "defaultValue": "Deny",
         "allowedValues": [
+          "audit",
           "Audit",
+          "deny",
           "Deny",
+          "disabled",
           "Disabled"
         ]
       },
       "aksAllowedCapabilities": {
         "type": "string",
         "defaultValue": "Deny",
         "allowedValues": [
+          "audit",
           "Audit",
+          "deny",
           "Deny",
+          "disabled",
           "Disabled"
         ]
       },
@@ -117,17 +126,23 @@
         "type": "string",
         "defaultValue": "Deny",
         "allowedValues": [
+          "audit",
           "Audit",
+          "deny",
           "Deny",
+          "disabled",
           "Disabled"
         ]
       },
       "aksDefaultNamespace": {
         "type": "string",
         "defaultValue": "Deny",
         "allowedValues": [
+          "audit",
           "Audit",
+          "deny",
           "Deny",
+          "disabled",
           "Disabled"
         ]
       },
@@ -144,8 +159,11 @@
         "type": "string",
         "defaultValue": "Deny",
         "allowedValues": [
+          "audit",
           "Audit",
+          "deny",
           "Deny",
+          "disabled",
           "Disabled"
         ]
       },

diff --git a/.../lib/policy_set_definitions/policy_set_definition_es_enforce_guardrails_network.tmpl.json b/.../lib/policy_set_definitions/policy_set_definition_es_enforce_guardrails_network.tmpl.json
@@ -8,7 +8,7 @@
     "displayName": "Enforce recommended guardrails for Network and Networking services",
     "description": "This policy initiative is a group of policies that ensures Network and Networking services are compliant per regulated Landing Zones.",
     "metadata": {
-      "version": "1.0.0",
+      "version": "1.1.0",
       "category": "Network",
       "source": "https://github.com/Azure/Enterprise-Scale/",
       "alzCloudEnvironments": [
@@ -56,7 +56,12 @@
       },
       "vnetModifyDdos": {
         "type": "string",
-        "defaultValue": "Modify"
+        "defaultValue": "Modify",
+        "allowedValues": [
+          "Audit",
+          "Modify",
+          "Disabled"
+        ]
       },
       "ddosPlanResourceId": {
         "type": "string",
@@ -229,9 +234,8 @@
         "type": "string",
         "defaultValue": "Deny",
         "allowedValues": [
-          "Audit",
-          "Deny",
-          "Disabled"
+          "Allow",
+          "Deny"
         ]
       },
       "modifyNsgRuleProtocol": {

diff --git a/.../lib/policy_set_definitions/policy_set_definition_es_enforce_guardrails_synapse.tmpl.json b/.../lib/policy_set_definitions/policy_set_definition_es_enforce_guardrails_synapse.tmpl.json
@@ -8,7 +8,7 @@
     "displayName": "Enforce recommended guardrails for Synapse workspaces",
     "description": "This policy initiative is a group of policies that ensures Synapse workspaces is compliant per regulated Landing Zones.",
     "metadata": {
-      "version": "1.0.0",
+      "version": "1.1.0",
       "category": "Synapse",
       "source": "https://github.com/Azure/Enterprise-Scale/",
       "alzCloudEnvironments": [
@@ -65,7 +65,6 @@
         "defaultValue": "Audit",
         "allowedValues": [
           "Audit",
-          "Deny",
           "Disabled"
         ]
       },