Azure / Azure/azure-policy

Issue with Policy "IP Forwarding on your virtual machine should be disabled"

Open
#833 1 comment 1 reaction 0 assignees View on GitHub
azure-security-center
Dominant language
Open Policy Agent
Stars
1.7k
Forks
1.2k
Avg merge
2d 54m
Merged PRs (30d)
3

Description

While I am creating the ARO cluster I get an error like this from time2time.

"errorMessage": "Unable to evaluate policy with definition '/providers/Microsoft.Authorization/policyDefinitions/bd352bd5-2853-4985-bf0d-73806b4a5744/' and assignment '/subscriptions//providers/Microsoft.Authorization/policyAssignments/SecurityCenterBuiltIn/'. The request to retrieve resources of type 'Microsoft.Security/assessments' failed with HTTP status code 'InternalServerError'.", "eventCategory": "Policy",

It looks like the policy „bd352bd5-2853-4985-bf0d-73806b4a5744” which is azure-policy/ASC_IPForwardingOnVirtualMachines_Audit.json is not able to evaluate its state and it leads to cluster failure.

I have Disabled this policy in the Assigment but it looks like an error!

Contributor guide

No contributing guide indexed for this repository

Research direction

Start with azure-policy/ASC_IPForwardingOnVirtualMachines_Audit.json and the reported Microsoft.Security/assessments HTTP 500 during ARO cluster creation. Determine whether the policy definition or assignment causes the failure, then verify the behavior with the policy enabled and disabled and confirm that cluster creation is no longer blocked.

Written by the indexing model from the issue text.

Assessment

Tech stack
azure
Domain
cloud, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.