Announcement

Collapse
No announcement yet.

Looking at possible Policy as Code solutions in Azure

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

  • Looking at possible Policy as Code solutions in Azure

    As any Azure admin knows, there is a large and comprehensive policy library. We have been working towards better adherence and better definitions of our policies. HOWEVER, we also feel that they are at least in part not quite up to snuff. For example the scoping of the policies doesn't support more complex behaviours like regular expressions to help with resource matching. Secondly you cannot necessarily see what the policy is evaluating (such as /etc/passwd permissions). We end up with false positives and no clear way of understanding how it came to the conclusion it did.
Working...
X