Azure Policy

1 answer

Configuring RDP NSG rule in Azure

I have a Azure VM with NSG for RDP listing for Source several static IPs, and it works. If I remove this list and put in "Any" for Source it says IPV4 / IPV6 invalid argument. So, in emergency when my static IP machines are down, I cannot log…

asked

Jon Melvin 0

answered

Q&A Assist

0 answers

Error with ARM template in deploy step 0.9.1 when trying to create the storage intent with switchless

I'm running a ARM template with version 24H2 2601. Validation works fine, but when running it as a repository, it fails at point 0.9.1, indicating that it cannot find the intent storage. Compute intent is good Magement intent is good Names of NIC are…

asked

Hugo Fernando Balbuena 0

commented

Suchitra Suregaunkar 7,435 Microsoft External Staff Moderator

1 answer

Resources deleted but still showing non compliance for tagging azure policy

Resources deleted but still showing non compliance for tagging azure policy.

asked

rajesh kumar 25

commented

rajesh kumar 25

0 answers

Feature Request: Missing Azure Policy Alias for identity.userAssignedIdentities on Microsoft.Web/sites

Description: We are implementing a security architecture that requires a 1:1 mapping between Web/Function Apps (and eventually other resources) and User Assigned Identities to ensure the idempotency of Infrastructure-as-Code (Bicep/ARM) deployments. The…

asked

Art Groeneveld 0

commented

Bharath Y P 4,135 Microsoft External Staff Moderator

2 answers

Need access to resources in my Tenant

I am trying to create Azure Policies for my tenant, Windows machines. It is indicating I do not have access to this, even though I am a global administrator. This is also happening with my ability to review and edit Virtual Networks. Please…

asked

Segura, Leos 20

edited a comment

Bharath Y P 4,135 Microsoft External Staff Moderator

2 answers

I want to create a Document Intelligence in Azure and I am getting error that Resource '<PII Removed>' was disallowed by policy. (Code: RequestDisallowedByPolicy, Policy(s): <PII Removed>)

I want to create a Document Intelligence in Azure and I am getting error that <PII Removed> was disallowed by policy. (Code: RequestDisallowedByPolicy, Policy(s): <PII Removed> <PII Removed> Error Message

asked

Murugan, Jegan EX1 20

answered

Sridhar M 4,645 Microsoft External Staff Moderator

0 answers

Issue with AI Services and Key access - {"error":{"code":"BadRequest","message":"Failed to list key. disableLocalAuth is set to be true"}}

Due to several policies and restrictions, I am currently unable to deploy key services, including AI Foundry, AI Project, AI Services, and Azure Machine Learning. Please grant all necessary roles and permissions deployments and build reliable POC Thank…

asked

Arjun Choubey 5 Microsoft Employee

edited a comment

Naveena Patlolla 8,055 Microsoft External Staff Moderator

1 answer

Validation error on VM creation using Azure for Students (not available regions)

I have the Azure for Students subscription, when I try to create a VM it shows an error of validation, or that the my subscription is not available on my region, I have tried using different regions and it keeps showing the same error.

asked

IBAI MUNNE UGALDE 0

commented

TP 148.6K Volunteer Moderator

2 answers

Azure policy blocking Foundry to be connected

The policy “Public network access on Azure AI Foundry resources must be disabled” is preventing us from connecting to Azure AI Foundry. We are requesting that this policy be removed from our subscription. Additionally, we want to ensure that removing…

asked

Shweta Srivastava 0 Microsoft Employee

recommended

Suchitra Suregaunkar 7,435 Microsoft External Staff Moderator

2 answers

How to get vm insight metrics using azure policy?

I want to enable and get the insight metrics of a virtual machine using the azure policy.How we can do that?

asked

Padmanabhan M 160

accepted

Padmanabhan M 160

1 answer

This policy remediation task re-evaluates before remediating. How is it failing to find evaluation results?

I've created an Azure policy that remediates any PaaS resources that aren't associated with a Network Security Perimeter, by associating the non-compliant resource with a NSP matching the resource's region (using the NSPs' names for selection). I've…

asked

Philip Hamlin (Quadrant Technologies LLC) 20 Microsoft External Staff

accepted

Philip Hamlin (Quadrant Technologies LLC) 20 Microsoft External Staff

2 answers

Add or replace a tag on subscriptions

When I apply this policy, does this mean I the tags will be automatically applied to the resource groups and resources in the subscription

asked

Mittal Priyamvada (BD/ICA-CAE) 40

answered

Bharath Y P 4,135 Microsoft External Staff Moderator

2 answers

Azure Policy definitions show in Portal after tenant migration but return 404 “Policy definition not found” (ghost policies)

📝 Description I recently migrated an Azure subscription to a new Entra ID (AAD) tenant. After the tenant move, I deleted several custom Azure Policy definitions and initiatives that were originally created in the old tenant. Issue In Azure Portal →…

asked

Amit Kaistha 20

accepted

Amit Kaistha 20

2 answers

Using Azure Defender for Cloud Policies to enforce Defender Plan Environment Settings at Scale

We are trying to use Azure provided Defender for Cloud policies to enforce Defender monitoring compliance at scale in our production environment. When reviewing "Environment settings" under "Microsoft Defender for Cloud", we are able…

asked

Guo, Jianning 105

answered

Siva shunmugam Nadessin 5,205 Microsoft External Staff Moderator

2 answers

Why am I not able to access my azure account even I've used my college id?

I am applying for azure free $100 credit with student email but i am geting error I am trying to avail free azure account benefits as a part with my new student email id. But azure shows me that i am not eligible for azure free account. This is the first…

asked

Pravin Sekar 5

answered

CHANDU 0

2 answers

NIST policy compliance error even though CMK is assigned to Automation Account

NIST rev2 policy compliance error is Azure Automation accounts should use customer-managed keys to encrypt data at rest All steps from https://aka.ms/automation-cmk have been followed. Non-compliance details Compliance state Current…

asked

Amit Raghav 20

answered

Siva shunmugam Nadessin 5,205 Microsoft External Staff Moderator

3 answers

I am getting a missing tag error on storage account creation

I am getting the error below when trying to create a storage account following a tutorial of a Udemy course. I do not understand the message as I have not created any tags. How can I found out what tag is it missing? Resource 'ManagedPlatform' was…

asked

Kristjan Sander 0

edited an answer

Suchitra Suregaunkar 7,435 Microsoft External Staff Moderator

2 answers

Remove deny assignment on my resource

I am owner of my subscription but am not able to remove deny assignment on this resources. I am not able to even identify who created this deny assignment. Can you please help me identify owner of deny assignment, Subscription id: <PII…

asked

Mihir Nanavati 20 Microsoft Employee

accepted

Mihir Nanavati 20 Microsoft Employee

1 answer

Under policies and Non Compliances - I see Windows Defender Exploit Guard to be enabled, I have enabled it but I still see the Non Compliance

I have a Policy Non Compliance: ES-2 Use modern anti-malware software and under details I get Windows Defender Exploit Guard to be enabled. I followed documentation and enabled the Windows Defender Exploit Guard, along with Controlled Folder protection…

asked

Sanket Kalyankar 0

commented

Siva shunmugam Nadessin 5,205 Microsoft External Staff Moderator

1 answer

Deleting resources in Azure is being blocked

I am not able to delete resources in Azure. Getting the following error message. Seems like there is a lock placed by Microsoft due to security concerns and even the tenancy admin cannot delete resources in its own tenancy. I have created a support…

asked

Mohid F 0

commented

Suchitra Suregaunkar 7,435 Microsoft External Staff Moderator

Filter

Content

1,160 questions with Azure Policy tags

Configuring RDP NSG rule in Azure

Error with ARM template in deploy step 0.9.1 when trying to create the storage intent with switchless

Resources deleted but still showing non compliance for tagging azure policy

Feature Request: Missing Azure Policy Alias for identity.userAssignedIdentities on Microsoft.Web/sites

Need access to resources in my Tenant

I want to create a Document Intelligence in Azure and I am getting error that Resource '<PII Removed>' was disallowed by policy. (Code: RequestDisallowedByPolicy, Policy(s): <PII Removed>)

Issue with AI Services and Key access - {"error":{"code":"BadRequest","message":"Failed to list key. disableLocalAuth is set to be true"}}

Validation error on VM creation using Azure for Students (not available regions)

Azure policy blocking Foundry to be connected

How to get vm insight metrics using azure policy?

This policy remediation task re-evaluates before remediating. How is it failing to find evaluation results?

Add or replace a tag on subscriptions

Azure Policy definitions show in Portal after tenant migration but return 404 “Policy definition not found” (ghost policies)

Using Azure Defender for Cloud Policies to enforce Defender Plan Environment Settings at Scale

Why am I not able to access my azure account even I've used my college id?

NIST policy compliance error even though CMK is assigned to Automation Account

I am getting a missing tag error on storage account creation

Remove deny assignment on my resource

Under policies and Non Compliances - I see Windows Defender Exploit Guard to be enabled, I have enabled it but I still see the Non Compliance

Deleting resources in Azure is being blocked