Azure/azure-policy

Repository for Azure Resource Policy built-in definitions and samples

Stars: 1.7k
Forks: 1.2k
Open beginner issues: 0
Indexed issues: 310
Avg merge: 2d 54m
Merged PRs (30d): 3

Dominant language: Open Policy Agent
License: MIT
Last GitHub push: Sep 8, 2026
Latest indexed: Sep 14, 2026
Contributing guide: No contributing guide
Code of conduct: Code of conduct
Beginner labels: No beginner labels indexed

Open All

310 open issues indexed

Is there any way to prevent everyone to delete or modify a specific tag added to resources but just add it? Open

Azure/azure-policy#389 · 8 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
LogProfile audit builtin policy needs updating to audit diagnostic setting Open

Azure/azure-policy#751 · 1 comment · 0 reactions · 1 assignee · Indexed Sep 14, 2026
storage account failed to deploy Open

Azure/azure-policy#800 · 1 comment · 0 reactions · 1 assignee · Indexed Sep 14, 2026
Enhancement: NetworkSecurityGroup_FlowLog_TrafficAnalytics_Deploy.json should support retention logs and duration Open

Azure/azure-policy#806 · 6 comments · 4 reactions · 1 assignee · Indexed Sep 14, 2026
KeyVault_SoftDeleteMustBeEnabled_Audit policy rule seems defined incorrectly Open

Azure/azure-policy#824 · 2 comments · 0 reactions · 1 assignee · Indexed Sep 14, 2026
Issue with Policy "IP Forwarding on your virtual machine should be disabled" Open

azure-security-center

Azure/azure-policy#833 · 1 comment · 1 reaction · 0 assignees · Indexed Sep 14, 2026
Azure Security Benchmark Initiative: missing parameter for an included policy Open

azure-security-center

Azure/azure-policy#838 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 14, 2026
[Preview]: Configure Azure Key Vaults with private endpoints: Incorrectly reports resources as non-compliant Open

Azure/azure-policy#862 · 12 comments · 1 reaction · 1 assignee · Indexed Sep 14, 2026
Deploy - Diagnostic Settings SQL Server should exclude Synapse Workspace under water SQL Server Open

Azure/azure-policy#872 · 1 comment · 1 reaction · 0 assignees · Indexed Sep 14, 2026
Deploy Diagnostic Settings for Azure SQL Database to Event Hub (id: "9a7c7a7d-49e5-4213-bea8-6a502b6272e0) is missing "eventHubLocation" as parameter Open

Azure/azure-policy#875 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Azure Monitor Agent Policies do not include server 2022 Open

Azure/azure-policy#876 · 4 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Allow Microsoft.Web/sites/slots/privateEndpointConnections/privateLinkServiceConnectionState.status in templates Open

Azure/azure-policy#878 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Alias request: Microsoft.Network/networkInterfaces/ipConfigurations[*].subnet.networkSecurityGroup.id Open

alias-request

Azure/azure-policy#888 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Alias request: Microsoft.Network/networkInterfaces/ipConfigurations[*].subnet.routeTable.id Open

alias-request

Azure/azure-policy#889 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
ContainerAllowedCapabilities: Adding any capability to allowedCapabilities list, makes it available to be used by ALL containers Open

Azure/azure-policy#890 · 17 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Alias request: Microsoft.Network/virtualNetworks/subnets[*].serviceEndpoints[*] Open

alias-request

Azure/azure-policy#891 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Existing policy assignments with 'Deny' effect no longer denying Open

Azure/azure-policy#904 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
[Feature request] Mode "Microsoft.Kubernetes.Data" support field alias like indexed mode Open

azure-policy-kubernetes

Azure/azure-policy#912 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 14, 2026
NIST-800-53 Rev 5 - No effect parameter for "Audit usage of custom RBAC rules" Open

Azure/azure-policy#914 · 0 comments · 5 reactions · 0 assignees · Indexed Sep 14, 2026
fix(batchdnsconfig): consider location condition for batch private endpoint Open

Azure/azure-policy#915 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Guest config - "Turn off multicast name resolution" expecting value 1 instead of 0 Open

Azure/azure-policy#916 · 0 comments · 2 reactions · 0 assignees · Indexed Sep 14, 2026
[Preview]: Certificates should have the specified maximum validity period showing non-compliance for soft-deleted certificates Open

Azure/azure-policy#917 · 1 comment · 0 reactions · 1 assignee · Indexed Sep 14, 2026
Missing categories in Built-in AKS Diagnostic Log Open

azure-policy-kubernetes

Azure/azure-policy#921 · 2 comments · 0 reactions · 1 assignee · Indexed Sep 14, 2026
KeyVault/Certificates_Issuers_CustomCAs: is not working as expected Open

Azure/azure-policy#924 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Ensure that 'Python version' is the latest, if used as a part of the Function app: Broken, false-positive Open

Azure/azure-policy#925 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
EventHub_DeployDiagnosticLog_Deploy_LogAnalytics.json is behind Open

Azure/azure-policy#926 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
ServiceBus_DeployDiagnosticLog_Deploy_LogAnalytics.json is behind Open

Azure/azure-policy#927 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Unable to get deny effect using azure policy on sql db creation when azure hybrid benefit is not enabled Open

Azure/azure-policy#931 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Alias request: "Microsoft.Web/sites/SKU" Open

Azure/azure-policy#934 · 0 comments · 3 reactions · 0 assignees · Indexed Sep 14, 2026
"[Preview]: Configure Azure Kubernetes Service clusters to enable Defender profile" uses old API version Open

azure-policy-kubernetes

Azure/azure-policy#935 · 1 comment · 0 reactions · 1 assignee · Indexed Sep 14, 2026
Add App Service FTPsState Aliases to be modifiable Open

alias-request

Azure/azure-policy#938 · 1 comment · 2 reactions · 0 assignees · Indexed Sep 14, 2026
Deploy to Azure Buttons Not Working for Custom Image Polic Sample Open

Azure/azure-policy#939 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Make aliases modifiable Open

alias-request

Azure/azure-policy#943 · 5 comments · 6 reactions · 0 assignees · Indexed Sep 14, 2026
Modifiable Alias missing for Microsoft.Compute/virtualMachines/extensions Open

alias-request

Azure/azure-policy#944 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
In Azure policy assigning an Azure Security Benchmark initiave for version 2 is not working Open

azure-security-center

Azure/azure-policy#945 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Log Analytics policy to deploy agent on Windows is outdated Open

Azure/azure-policy#956 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
LogAnalyticsExtension_Windows_VM_Deploy.json -CIS images support Open

Azure/azure-policy#957 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Configure Log Analytics workspace and automation account to centralize logs and monitoring: Location is hard coded. Open

Azure/azure-policy#960 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Dependency agent should be enabled for listed virtual machine images - Scoping issue Open

Azure/azure-policy#961 · 1 comment · 1 reaction · 0 assignees · Indexed Sep 14, 2026
Can't find AzureOSBaseline Module Open

guest-configuration

Azure/azure-policy#969 · 6 comments · 3 reactions · 1 assignee · Indexed Sep 14, 2026
Policy "Ensure that 'Java version' is the latest, if used as a part of the Web app" still checking for old version (11) Open

Azure/azure-policy#974 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Out of date built-in policies Open

Azure/azure-policy#975 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Cosmos_DisableMetadata_Append.json: Clarify description Open

Azure/azure-policy#979 · 1 comment · 1 reaction · 0 assignees · Indexed Sep 14, 2026
Unable to use definition "azure-policy/built-in-policies/policyDefinitions/Key Vault/Secrets_ActivePeriod.json" Open

Azure/azure-policy#981 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Parameters/Evaluation: Configure diagnostic settings for storage accounts to Log Analytics workspace Open

Azure/azure-policy#986 · 10 comments · 1 reaction · 0 assignees · Indexed Sep 14, 2026
Assigning a azure policy to management group using terraform Open

Azure/azure-policy#989 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Grafana Deployment Ignored RoleAssignment Deny Policy Open

Azure/azure-policy#996 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Deploy Diagnostic Settings for Service Bus to Log Analytics workspace: missing Log Categories Open

Azure/azure-policy#997 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Audit diagnostic setting for load balancer - missing logs setting Open

Azure/azure-policy#1001 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Alias Request: Microsoft.OperationalInsights/workspaces/retentionInDays Open

alias-request

Azure/azure-policy#1002 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 14, 2026

A short digest of beginner-friendly GitHub issues.