Azure / Azure/PSRule.Rules.Azure
Exemptions as suppression groups
Open
enhancement
feature: policy-as-rules
- Dominant language
- PowerShell
- Stars
- 447
- Forks
- 109
- Avg merge
- 2d 19h
- Merged PRs (30d)
- 23
Description
Azure Policy supports exemptions to ignore mitigated or waved policy controls.
When importing policy from Azure we also need to add support for these controls.
Natively PSRule supports suppression groups which has a similar purpose.
Recent updates in PSRule have added features required for implementation:
- Time bound suppression - microsoft/PSRule#1335
- Target scope - microsoft/PSRule#1350
Additionally PSRule for Azure needs to:
- Export exemptions when exporting assignments. #1888
- Generate suppression groups for exemptions. #1889
Contributor guide
Assessment
This issue has not been assessed yet.