AzPolicyTest Module Updated to 2.8.0
I have updated the AzPolicyTest PowerShell module (GitHub, PowerShell Gallery) to v2.8.0
. This release includes the following updates:
New test to check if any referenced resource types are excluded from policy evaluation
Azure policy excludes several resource types when evaluating resources. these types are defined here:
- Resources that are exempt from policy evaluation
- Provider pass-through to non Azure Resource Manager resources
Added a new test to check if any referenced resource types are from the lists above (using regex)
Updated tests for Audit / Deny interchangeable effects to exclude auto-generated bypassed properties
Some properties are not available at resource creation time (not in the request payload). any policies targeting these properties cannot use Deny
effect.(Optional or auto-generated resource property that bypasses policy evaluation)
- Updated the existing tests for Audit / Deny interchangeable effects to exclude policies that are referencing these properties (using regex)
- Added new test to ensure any policies that are referencing these properties do have Deny as one of the allowed values for the policy effect.
Leave a comment