azurepolicy

Azure Governance Visualizer aka AzGovViz is a PowerShell script that captures Azure Governance related information such as Azure Policy, RBAC (a lot more) by polling Azure ARM, Storage and Microsoft Graph APIs.

A curated list of blogs, videos, tutorials, code, tools, scripts, and anything useful to help you learn Azure Policy - by @jesseloudon

Bicep and Terraform code examples for policy-as-code workflows. Azure governance guardrails and automation - by @jesseloudon

Library of assets to deploy Azure Landing Zones architectures

This repository outlines an automated testing approach for Azure Policies. The approach is fundamentally based on behavior-driven development (BDD) to improve communication between developers, security experts and compliance officers.

AzAdvertizer helps you to keep up with the pace by providing overview and insights on new releases and changes/updates for Azure Governance capabilities such as Azure Policy's policy definitions, initiatives (set definitions), aliases, security & regulatory compliance controls and Azure RBAC's role definitions and resource provider operations.

Azure Policy examples using Bicep language by @jesseloudon

Azure Policy for AKS demo, including a custom policy example.

Azure custom Policy definition to deny VNET Subnet size and address space with same size

Azure custom Policy definition to deny specific VNET subnet size (e.g /24)

Library containing custom azure polices to deploy to your azure subscription.

Repository for the Azure Governance Best Practices: Ensuring Compliance with Policy-driven Guardrails blog post, to implement policy-driven guardrails using Terraform.

Example Modules for Azure Policy Guest Configuration for Linux VMs

Reference Implementation about Policy as Code applied to Azure based on DevSecOps Practices

Hands-on Azure cloud security hardening lab demonstrating misconfiguration analysis, remediation, validation, NSG security, identity-based access, Microsoft Defender for Cloud, and Azure Policy enforcement.

Custom Azure Policy to set a Maximum amount of address spaces allowed on VNET\'s

Sample repo on how to integrate Azure Policy definition with Azure Devops