Azure/Azure-Landing-Zones

View on GitHub

Azure Landing Zones documentation

Stars: 96
Forks: 70
Open beginner issues: 0
Indexed issues: 391
Avg merge: 3d 1h
Merged PRs (30d): 7

Dominant language: PowerShell
License: MIT
Last GitHub push: Sep 14, 2026
Latest indexed: Sep 14, 2026
Contributing guide: Contributing guide
Code of conduct: Code of conduct
Beginner labels: No beginner labels indexed

Open All

391 open issues indexed

Possibility to choose region for Log Analytics / Automation Account resource deployment Open

Transfer From: Enterprise-Scale :arrow_right:

Azure/Azure-Landing-Zones#286 · 7 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Bug Bash: Secrets stored in Subscription is a security concern Open

Transfer From: Enterprise-Scale :arrow_right:

Azure/Azure-Landing-Zones#285 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Connection Monitor (aka Network Performance Monitor) Open

Transfer From: Enterprise-Scale :arrow_right:

Azure/Azure-Landing-Zones#284 · 2 comments · 0 reactions · 1 assignee · Indexed Sep 14, 2026
LZ / Workload Toolset choice tree Open

Transfer From: Enterprise-Scale :arrow_right:

Azure/Azure-Landing-Zones#283 · 3 comments · 0 reactions · 1 assignee · Indexed Sep 14, 2026
Guidance on moving Sentinel for Brownfield customers Open

Transfer From: Enterprise-Scale :arrow_right:

Azure/Azure-Landing-Zones#282 · 3 comments · 0 reactions · 1 assignee · Indexed Sep 14, 2026
Please add tooltip for each option. Open

Transfer From: Enterprise-Scale :arrow_right:

Azure/Azure-Landing-Zones#281 · 3 comments · 0 reactions · 1 assignee · Indexed Sep 14, 2026
Update tooltip - Management sub dedicated/single Open

Transfer From: Enterprise-Scale :arrow_right:

Azure/Azure-Landing-Zones#280 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Create docs page - Advanced block / Settings Open

Transfer From: caf-enterprise-scale :arrow_right:

Azure/Azure-Landing-Zones#546 · 6 comments · 12 reactions · 0 assignees · Indexed Sep 14, 2026
add a new default Management Group Open

Transfer From: Enterprise-Scale :arrow_right:

Azure/Azure-Landing-Zones#279 · 8 comments · 0 reactions · 1 assignee · Indexed Sep 14, 2026
Integrating AzGovViz with ESLZ Open

Transfer From: Enterprise-Scale :arrow_right:

Azure/Azure-Landing-Zones#278 · 6 comments · 0 reactions · 1 assignee · Indexed Sep 14, 2026
Sometimes Policy Assignments Fail During Deployment As Part Of Portal Experience Deployment Open

Transfer From: Enterprise-Scale :arrow_right:

Azure/Azure-Landing-Zones#277 · 11 comments · 0 reactions · 1 assignee · Indexed Sep 14, 2026
Working with Policy exemptions in Enterprise scale Open

Transfer From: caf-enterprise-scale :arrow_right:

Azure/Azure-Landing-Zones#545 · 44 comments · 40 reactions · 0 assignees · Indexed Sep 14, 2026
Azure Landing Zone Networking vWAN with third party NVA Open

Transfer From: Enterprise-Scale :arrow_right:

Azure/Azure-Landing-Zones#276 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Add Network Isolation for Azure Monitor Logging Open

Transfer From: Enterprise-Scale :arrow_right:

Azure/Azure-Landing-Zones#275 · 4 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Include subscription vending in the accelerator [formerly Document the process of es deployment] Open

Status: Long Term :hourglass: Transfer From: alz-powershell-module :arrow_right:

Azure/Azure-Landing-Zones#420 · 11 comments · 7 reactions · 0 assignees · Indexed Sep 14, 2026
Enable "managed" Policy Assignment parameters for custom Management Group hierarchies Open

Transfer From: caf-enterprise-scale :arrow_right:

Azure/Azure-Landing-Zones#543 · 9 comments · 1 reaction · 1 assignee · Indexed Sep 14, 2026
Azure Bastion in Adventure Works and Trey Research Open

Transfer From: Enterprise-Scale :arrow_right:

Azure/Azure-Landing-Zones#274 · 8 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Ensure that Azure Resource Group has resource lock enabled Open

Transfer From: caf-enterprise-scale :arrow_right:

Azure/Azure-Landing-Zones#542 · 6 comments · 1 reaction · 0 assignees · Indexed Sep 14, 2026
Ensure that Azure Virtual Network subnet is configured with a Network Security Group Open

Transfer From: caf-enterprise-scale :arrow_right:

Azure/Azure-Landing-Zones#541 · 5 comments · 2 reactions · 0 assignees · Indexed Sep 14, 2026
Deployment error if NetworkWatcherRG exists in a different region Open

Transfer From: Enterprise-Scale :arrow_right:

Azure/Azure-Landing-Zones#273 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Separate workspace for Microsoft Sentinel Open

Transfer From: Enterprise-Scale :arrow_right:

Azure/Azure-Landing-Zones#272 · 7 comments · 4 reactions · 1 assignee · Indexed Sep 14, 2026
when a new resource is created this policy (definition es deploy asc security contacts) doesn't trigger a remediation as expected Open

Needs: Attention :wave: Transfer From: Enterprise-Scale :arrow_right:

Azure/Azure-Landing-Zones#271 · 6 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Linking 'privatelink.monitor.azure.com' Private DNS Zone Breaks Log Analytics Querying When AMPLS Not Used Open

Transfer From: Enterprise-Scale :arrow_right:

Azure/Azure-Landing-Zones#270 · 11 comments · 4 reactions · 1 assignee · Indexed Sep 14, 2026
Update to new update management solution and remove region dependency for LA Open

Transfer From: Enterprise-Scale :arrow_right:

Azure/Azure-Landing-Zones#269 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
ASC (MDFC) export to Azure Monitor is not reliable due to DINE policy race condition Open

Transfer From: caf-enterprise-scale :arrow_right:

Azure/Azure-Landing-Zones#540 · 5 comments · 1 reaction · 1 assignee · Indexed Sep 14, 2026
Provide full RBAC coverage for Policy Assignments with Managed Identity Open

Transfer From: caf-enterprise-scale :arrow_right:

Azure/Azure-Landing-Zones#539 · 14 comments · 9 reactions · 0 assignees · Indexed Sep 14, 2026
Incorrect automation region mapping for Log Analytics workspace in East US regions Open

Needs: Attention :wave: Transfer From: Enterprise-Scale :arrow_right:

Azure/Azure-Landing-Zones#268 · 9 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Configure Azure Advisor Alerts via DINE Policy for Every Subscription in Scope Open

Transfer From: Enterprise-Scale :arrow_right:

Azure/Azure-Landing-Zones#267 · 8 comments · 0 reactions · 1 assignee · Indexed Sep 14, 2026
User Assigned identity for Policy Open

Azure/Azure-Landing-Zones#538 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Add Azure DNS Private Resolver Open

Transfer From: Enterprise-Scale :arrow_right:

Azure/Azure-Landing-Zones#266 · 3 comments · 0 reactions · 1 assignee · Indexed Sep 14, 2026
API don't return needed information to grant SPN permissions in Wiki Create Landingzones Open

Needs: Attention :wave: Transfer From: Enterprise-Scale :arrow_right:

Azure/Azure-Landing-Zones#264 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Azure Event Hub and Even Management Open

Transfer From: caf-enterprise-scale :arrow_right:

Azure/Azure-Landing-Zones#537 · 5 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
IaaS Workloads Landing Zone Open

Transfer From: Enterprise-Scale :arrow_right:

Azure/Azure-Landing-Zones#263 · 6 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Add subplan support for Security Center resource types to adjust the pricing model Open

Transfer From: caf-enterprise-scale :arrow_right:

Azure/Azure-Landing-Zones#536 · 4 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Create a user assigned managed identity for each landing zone to assign to AMA agent Open

Transfer From: Enterprise-Scale :arrow_right:

Azure/Azure-Landing-Zones#262 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Documentation update - Preview services/features used in ALZ Open

Transfer From: Enterprise-Scale :arrow_right:

Azure/Azure-Landing-Zones#261 · 5 comments · 0 reactions · 1 assignee · Indexed Sep 14, 2026
Update documentation gap: How to configure Private and Public DNS Zones (Examples) Open

Transfer From: caf-enterprise-scale :arrow_right:

Azure/Azure-Landing-Zones#535 · 4 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Add P2S VPN Support to Module on VPN Gateways Open

Transfer From: caf-enterprise-scale :arrow_right:

Azure/Azure-Landing-Zones#533 · 5 comments · 2 reactions · 0 assignees · Indexed Sep 14, 2026
Usable outputs Open

Azure/Azure-Landing-Zones#532 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
`secure_spoke_virtual_network_resource_ids` doesn't work without additional config outside the module Open

Transfer From: caf-enterprise-scale :arrow_right:

Azure/Azure-Landing-Zones#531 · 10 comments · 0 reactions · 1 assignee · Indexed Sep 14, 2026
Naming of the virtual hub connection Open

Transfer From: caf-enterprise-scale :arrow_right:

Azure/Azure-Landing-Zones#530 · 8 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Update naimng to confirm with CAF naming Standards Open

Transfer From: caf-enterprise-scale :arrow_right:

Azure/Azure-Landing-Zones#528 · 6 comments · 14 reactions · 1 assignee · Indexed Sep 14, 2026
Move from actions/upload-release-asset as it is no longer maintained. Open

Transfer From: alz-powershell-module :arrow_right:

Azure/Azure-Landing-Zones#419 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 14, 2026
How do I set subnet delegation within the hub networks? Open

Transfer From: caf-enterprise-scale :arrow_right:

Azure/Azure-Landing-Zones#527 · 6 comments · 3 reactions · 1 assignee · Indexed Sep 14, 2026
Allow UserAssigned Identities for Policy Assignments Open

Transfer From: caf-enterprise-scale :arrow_right:

Azure/Azure-Landing-Zones#526 · 6 comments · 4 reactions · 1 assignee · Indexed Sep 14, 2026
Guidance on TF state/secrets missing in Getting Started Open

Transfer From: caf-enterprise-scale :arrow_right:

Azure/Azure-Landing-Zones#525 · 1 comment · 1 reaction · 1 assignee · Indexed Sep 14, 2026
The argument "default_location" is required, but no definition was found. Open

Transfer From: caf-enterprise-scale :arrow_right:

Azure/Azure-Landing-Zones#524 · 2 comments · 0 reactions · 1 assignee · Indexed Sep 14, 2026
Audit with Sandbox Open

Transfer From: Enterprise-Scale :arrow_right:

Azure/Azure-Landing-Zones#255 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Renaiming again (Virtual Network Links) Open

Transfer From: caf-enterprise-scale :arrow_right:

Azure/Azure-Landing-Zones#523 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Enable override on custom landing zone to Brownfield migration Open

Transfer From: caf-enterprise-scale :arrow_right:

Azure/Azure-Landing-Zones#522 · 2 comments · 3 reactions · 0 assignees · Indexed Sep 14, 2026

Azure/Azure-Landing-Zones

Get new issues in your inbox