Azure/PSRule.Rules.Azure

View on GitHub

Rules to validate Azure resources and infrastructure as code (IaC) using PSRule.

Stars: 447
Forks: 109
Open beginner issues: 0
Indexed issues: 125
Avg merge: 2d 19h
Merged PRs (30d): 23

Dominant language: PowerShell
License: MIT
Last GitHub push: Sep 13, 2026
Latest indexed: Sep 14, 2026
Contributing guide: Contributing guide
Code of conduct: Code of conduct
Beginner labels: help wanted good first issue

Open All

125 open issues indexed

[RULE] List Guest and Disabled accounts with Read and/or Write access to Azure subscription Open

feature: in-flight-export pillar: operational-execellence

Azure/PSRule.Rules.Azure#3239 · 0 comments · 1 reaction · 0 assignees · Indexed Sep 14, 2026
[FEATURE] Export key vault key metadata via data plane API Open

feature: in-flight-export

Azure/PSRule.Rules.Azure#3265 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
[RULE] Check for cases when a sensitive value is set on a non-secure property Open

pillar: security rule: deployment

Azure/PSRule.Rules.Azure#3320 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 14, 2026
[RULE] Check that additional fleet locations are within allow regions Open

pillar: security rule: fleet

Azure/PSRule.Rules.Azure#3380 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
[BUG] Inherited 25 subscription limit with Export-AzRuleData -All Open

bug feature: in-flight-export

Azure/PSRule.Rules.Azure#3501 · 1 comment · 1 reaction · 0 assignees · Indexed Sep 14, 2026
[RULE] Rename Azure.MySQL.AAD Open

rule: mysql

Azure/PSRule.Rules.Azure#3623 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
[RULE] Rename Azure.MySQL.AADOnly Open

rule: mysql

Azure/PSRule.Rules.Azure#3624 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
[FEATURE] Add support for predefined existing resource Open

.NET feature: pre-flight-expansion

Azure/PSRule.Rules.Azure#3657 · 0 comments · 1 reaction · 0 assignees · Indexed Sep 14, 2026
[FEATURE] Add support to export a predefined resource as existing Open

.NET feature: pre-flight-expansion

Azure/PSRule.Rules.Azure#3658 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
[FEATURE] Allow predefined existing resources to be cached and reused across an enterprise Open

.NET feature: pre-flight-expansion

Azure/PSRule.Rules.Azure#3659 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
[BUG] Azure.Deployment.SecureParameter is matching the keys param in public:avm/res/key-vault/vault Open

bug pillar: security rule: keyvault

Azure/PSRule.Rules.Azure#3697 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 14, 2026
[FEATURE] Maturity Level 2 - WAF Security Open

feature: baseline pillar: security

Azure/PSRule.Rules.Azure#3726 · 0 comments · 1 reaction · 2 assignees · Indexed Sep 14, 2026
[RULE] Azure Fleets should use secure boot Open

good first issue pillar: security rule: fleet

Azure/PSRule.Rules.Azure#3729 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
[RULE] Disable public network access on file shares Open

good first issue lifecycle: preview pillar: security rule: storage-account

Azure/PSRule.Rules.Azure#3735 · 7 comments · 0 reactions · 1 assignee · Indexed Sep 14, 2026
[FEATURE] Add Terraform support for azurerm_resource_group Open

.NET feature: pre-flight-expansion feature: terraform

Azure/PSRule.Rules.Azure#3772 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 14, 2026
[FEATURE] Support for hashicorp/random Open

.NET feature: pre-flight-expansion feature: terraform

Azure/PSRule.Rules.Azure#3773 · 4 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Expand terraform testing with AVM Open

.NET feature: pre-flight-expansion feature: terraform

Azure/PSRule.Rules.Azure#3774 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
[FEATURE] Add Terraform support for azurerm_user_assigned_identity Open

.NET feature: pre-flight-expansion feature: terraform

Azure/PSRule.Rules.Azure#3775 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Export-AzRuleData fails with HTTP 400 for DefenderForStorageSettings due to deprecated API version Open

bug feature: in-flight-export

Azure/PSRule.Rules.Azure#3865 · 0 comments · 1 reaction · 0 assignees · Indexed Sep 14, 2026
[FEATURE] Improve performance of Bicep expansion with json-rpc Open

feature: pre-flight-expansion

Azure/PSRule.Rules.Azure#3877 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 14, 2026
Export-AzRuleData can exit silently with no output: unreachable context guard, StrictMode filter aborts all contexts, bare return Open

bug feature: in-flight-export

Azure/PSRule.Rules.Azure#3880 · 0 comments · 1 reaction · 0 assignees · Indexed Sep 14, 2026
[BUG] Bicep expansion fails when AVM Web Site `managedIdentities.userAssignedResourceIds` contains a module output Open

bug feature: pre-flight-expansion

Azure/PSRule.Rules.Azure#3881 · 0 comments · 1 reaction · 0 assignees · Indexed Sep 14, 2026
[BUG] [Experimental] Runtime values in tags and sku Open

bug feature: bicep-language feature: pre-flight-expansion

Azure/PSRule.Rules.Azure#3884 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
[BUG] cidrHost/cidrSubnet fail during Bicep expansion when address prefixes are assigned outside the template Open

bug feature: bicep-language feature: pre-flight-expansion

Azure/PSRule.Rules.Azure#3907 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
[BUG] Expansion fails with "Hash must be finalized before the hash value is retrieved" when using an object output from a cross-scope module Open

Azure/PSRule.Rules.Azure#3909 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026

Azure/PSRule.Rules.Azure

Get new issues in your inbox