azure landing zone template doesn't work properly
when trying to deploy a landing zone with the portal template, during validate deployment operation I receive the following error: Multiple error occurred:…
Deny assignment for data plane actions
Can deny assignments be defined to block data plane actions (prevent deletion of blobs inside a storage account for example)? I know that Blueprints or Azure policy can provide some level of denial to delete actions it doesn't look like it covers data…
How can I find Azure Policy or Blueprints to apply for HITRUST
I am having a difficult time finding the pre-built set of Azure Policy or Azure Blueprints that correspond to HITRUST? There are a lot of articles in MS Learn but none that give instructions on how to actually deploy. Could anyone advise on where to…
Creating a Condition for RBAC in Azure with ARM Template
Hello, I am attempting to set up a condition in Azure role-based access control (RBAC) through an ARM template. Specifically, I would like to create a condition in which a certain group can only assign "Azure Service Bus Data Receiver" and…
Is deployment stack supporting all Azure integration services
Hello, Is it possible to deploy via deployment stacks all Azure integration services, like LogicApp, Servicebus, APIM, Event grid and Functions? Regards, Laurens van de Venn
How many parameters does an Azure Blueprint Artifact need to be valid?
How many parameters does an Azure Blueprint Artifact need to be valid? Options: 0, 1, 2
checklist after getting azure subscription for setup production environment
Hello, I want to setup a new environment that I will use as production. What is the basic checklist I need to do after getting an Azure subscription? like branding, ,architecture ,monitoring, ,security points of view or other related things .. Thanks …
How to hide Azure Windows 10 sandbox instance from malware.
Hello, I want my Azure Windows 10 sandbox to act more like a host not as a guest, while some of the malware are able to detect virtual environments. To check how the sanbox might look like for malware and then where to look for optimization I used a tool…
can we update azure active directory properties like (user setting, group setting ,MFA) with a AZure policy or blueprint? is it possible
can we update any azure active directory property (user setting, group setting ,MFA etc) and enforce it with a AZure policy or blueprint? is it possible ?
Azure Active directory basic properties setting through policy or blueprint
I want to set the basic AD policies in My tenant as mentioned in this article (under Identities section) . example - some user setting attributes or MFA settings which should be "yes or No"…
How are ARM templates different from Blueprints?
I would like to know how ARM templates are different from Blueprints.
deny assignment
Hello, I'm trying to create a deny assignment on a storage account in order to deny access even if the users are owner of the subscription. All what I see in the documentation is adding a lock ( using the blueprint or listing the deny…
Inspecting and troubleshooting which Azure Policy & Blueprint
Hi All, I need some help inspecting and troubleshooting which Azure Policy & Blueprint applied to the specific resource group. How to check which Azure Policy & Azure Blueprint is applied to my Resource group? Is there any PowerShell…
PCI DSS Blueprint
I can no longer find the PCI DSS Blueprint. https://azure.microsoft.com/en-us/blog/new-pci-dss-azure-blueprint-makes-compliance-simpler/
Restricting Access in Customer Owned Subscription
Without using Azure Blueprint, how can I restrict a customer from altering a specific NVA/Subnet/PIP where the customer as owner access to the subscription? Are there any other tenant level polices I can leverage to lock down a specific resource or…
Deploying Microsoft Sentinel workbooks with Azure blueprints
Dear Support, As part of the Blueprint deployment process to deploy MS sentinel as a whole, would like to verify whether workbooks and notebooks can be included as json artefacts. Appreciate if you could point me to any reference documentation. …
Blueprint could not assign to other subscriptions
The variable is fixed and could not be modified. Is there any permission i have set wrongly. Thanks FYI. I got owner rbac roles for all subscriptions
Microsoft Online Services Program Subscriptions
Hello, I have an MOSP account type. Is it possible to create subscriptions using ARM templates or must they be created manually? I noticed that with Terraform, the data resource for MOSP does not exist to create the subscription does not exist. …
Issue choosing minimal TLS version for Azure SQL server ARM template
Hi, I have an issue trying to choose the minimal TLS version for my Azure SQL server. Everytime I try to deploy this template without this parameter it works and when I deploy it with this parameter it fails. I was wondering if anyone knows why and how…
Why do I get the "This is not a valid template" error in my ARM template/JSON code?
Hi there, I am trying to create an ARM template for deploying an Azure SQL Database + Server. I am looking to use this ARM template in a Blueprint I am trying to setup. For some reason my template is not showing the amount of resource and gives me an…