Azure / Azure/Azure-Verified-Modules

AzAdvertizer data changes detected

Open
#2,509 1 comment 0 reactions 0 assignees View on GitHub
Needs: Triage :mag:
Dominant language
PowerShell
Stars
580
Forks
161
Avg merge
11h 3m
Merged PRs (30d)
15

Description

Azure Advertizer Data Diff Report

Resource Type: microsoft.aad/domainservices
--------------------------------------------------
New Advisor Recommendations:
- [Migrate to TLS 1.2 or above for Entra domain services](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/e756137a-ce78-4586-a777-1059cb9d14c5)

Resource Type: microsoft.alertsmanagement/actionrules
--------------------------------------------------
New Advisor Recommendations:
- [Migrate to Azure Monitor VM insights](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/58aa4abd-e6e3-4557-9991-0928f85cee92)

Resource Type: microsoft.apimanagement/service
--------------------------------------------------
New Advisor Recommendations:
- [Migrate to TLS 1.2 or above for API Management](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/18d79d0b-6a10-49f7-a0e4-f6b3b6f9c9b1)

Resource Type: microsoft.app/containerapps
--------------------------------------------------
New Advisor Recommendations:
- [Azure Container Apps should not be exposed to the public internet unless required](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/4f6e5d7e-1c0d-4e2f-b8a9-0b1c2d3e4f5a)
- [Managed identities assigned to Azure Container Apps should follow least privilege](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/2d4f3e5e-9a8b-4c0d-b6e7-8f9a0b1c2d3e)

Resource Type: microsoft.azureplaywrightservice/accounts
--------------------------------------------------
New Advisor Recommendations:
- [Migrate to Azure App Testing](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/2c1fc2d7-3e01-4bce-b306-5d506c4d7f2a)

Resource Type: microsoft.cognitiveservices/accounts
--------------------------------------------------
New Advisor Recommendations:
- [Migrate to conversational language understanding](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/2b8347d8-bd08-4046-892d-8844f741b8b2)

Resource Type: microsoft.compute/virtualmachines
--------------------------------------------------
New Advisor Recommendations:
- [Migrate to the newer VM series in the same NC product line](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/81076cd9-e656-4b1a-862b-63f2f40caa87)

Resource Type: microsoft.compute/virtualmachinescalesets
--------------------------------------------------
New Advisor Recommendations:
- [Migrate to Windows Server 2022](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/98680ff0-2723-4c8b-9af4-54ce8a3a82d1)

Resource Type: microsoft.containerservice/managedclusters
--------------------------------------------------
New Advisor Recommendations:
- [Migrate to Azure Linux 3.0](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/cc59372b-bd3d-415f-91c1-6c596b5de2fc)

Resource Type: microsoft.dbforpostgresql/flexibleservers
--------------------------------------------------
New Advisor Recommendations:
- [Public schema access should be revoked for Azure Database for PostgreSQL Servers](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/e8ff26f7-6a25-482d-a5ea-9eb59b001ea5)
- [shared_preload_libraries should include pgaudit for Azure Database for PostgreSQL Servers](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/0826dc9b-9bd2-48eb-aeac-390dfb94539c)
- [pgaudit.log should include role, ddl, and misc for Azure Database for PostgreSQL Servers](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/39bcf5d5-354e-4046-bad3-7a1dad887661)
- [pgaudit.log_statement should be set to on for Azure Database for PostgreSQL Servers](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/1b9bfb30-a049-41b9-8d0d-d78fd20c02da)
- [log_line_prefix should include key identifiers for auditing and troubleshooting for Azure Database for PostgreSQL Servers](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/e4f987cb-6eec-4027-ad4d-977e79cbc8f9)
- [require_secure_transport should be set to on for Azure Database for PostgreSQL Servers](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/d8f93403-bfec-4eed-8edf-426ce8750c32)
- [Upgrade to higher PostgreSQL versions](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/73b5a830-9074-4206-8f21-0ca3285b9eee)

Resource Type: microsoft.dbforpostgresql/flexibleservers/databases
--------------------------------------------------
New Advisor Recommendations:
- [Public role should not have database-level access for Azure Database for PostgreSQL databases](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/f64b7fb8-28b5-4c31-91a3-e2d6b9d858a2)
- [pgaudit extension should be installed for Azure Database for PostgreSQL databases](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/b246989e-0735-4751-b5a8-c2cdeedc4308)

Resource Type: microsoft.eventgrid/domains
--------------------------------------------------
New Advisor Recommendations:
- [Migrate to TLS 1.2 or above for Event Grid](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/823258d3-2ad7-4ece-a848-4343defcd94b)

Resource Type: microsoft.machinelearningservices/workspaces
--------------------------------------------------
New Advisor Recommendations:
- [Migrate to dedicated virtual machine for compute clusters](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/ed10386a-ca8c-4165-b587-b6cce322cbd6)

Resource Type: microsoft.network/applicationgateways
--------------------------------------------------
New Advisor Recommendations:
- [Migrate to TLS 1.2 or above for Application Gateway](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/a7ecaaaa-dc86-444b-8aad-e0773d5c2324)

Resource Type: microsoft.network/azurefirewalls
--------------------------------------------------
New APRL Recommendations:
- [Monitor "AZFW Latency Probe" metric](https://azure.github.io/Azure-Proactive-Resiliency-Library-v2/azure-resources/Network/azureFirewalls/#monitor-azfw-latency-probe-metric)

Resource Type: microsoft.operationsmanagement/solutions
--------------------------------------------------
New Advisor Recommendations:
- [Migrate to Azure Monitor VM insights when Service Map is being retired.](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/5da9649e-147b-4762-a5a5-0abea68e0e9b)

Resource Type: microsoft.security/awsresource
--------------------------------------------------
New Advisor Recommendations:
- [Avoid the use of the "root" account](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/a47a6c3b-0629-406c-ad09-d91f7d9f78a3)
- [IAM policies that allow full "*:*" administrative privileges should not be created](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/1d08b362-7e24-46b0-bed1-4a6c1d1526a5)

Resource Type: microsoft.sql/servers
--------------------------------------------------
New Advisor Recommendations:
- [Migrate to TLS 1.2 or above for SQL databases](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/8eff5550-a532-452b-88dd-f4032156da2f)

Resource Type: microsoft.synapse/workspaces/kustopools
--------------------------------------------------
New Advisor Recommendations:
- [Migrate to Eventhouse in Microsoft Fabric](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/439a275e-50fd-412d-8167-8297b32ee12d)

Resource Type: microsoft.web/sites
--------------------------------------------------
New Advisor Recommendations:
- [Upgrade apps to Python 3.10](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/14f2b661-8b62-4e1e-9020-6ae63ce9e354)
- [Upgrade App Service apps to Node 20 LTS](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/e990f401-84cc-4438-9c06-8bbf4e2611ec)

Contributor guide

No contributing guide indexed for this repository

Research direction

No repository file, test, or entry point is named. Start by reviewing the Azure Advertizer data-diff report and its linked Azure Advisor and APRL recommendations, then locate the corresponding Azure Verified Modules data; done means the detected changes are reflected consistently and repository checks pass.

Written by the indexing model from the issue text.

Assessment

Tech stack
azure
Domain
cloud
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.