Creating a Condition for RBAC in Azure with ARM Template
Hello, I am attempting to set up a condition in Azure role-based access control (RBAC) through an ARM template. Specifically, I would like to create a condition in which a certain group can only assign "Azure Service Bus Data Receiver" and…
How to hide Azure Windows 10 sandbox instance from malware.
Hello, I want my Azure Windows 10 sandbox to act more like a host not as a guest, while some of the malware are able to detect virtual environments. To check how the sanbox might look like for malware and then where to look for optimization I used a tool…
Azure Active directory basic properties setting through policy or blueprint
I want to set the basic AD policies in My tenant as mentioned in this article (under Identities section) . example - some user setting attributes or MFA settings which should be "yes or No"…
How are ARM templates different from Blueprints?
I would like to know how ARM templates are different from Blueprints.
deny assignment
Hello, I'm trying to create a deny assignment on a storage account in order to deny access even if the users are owner of the subscription. All what I see in the documentation is adding a lock ( using the blueprint or listing the deny…
Why do I get the "This is not a valid template" error in my ARM template/JSON code?
Hi there, I am trying to create an ARM template for deploying an Azure SQL Database + Server. I am looking to use this ARM template in a Blueprint I am trying to setup. For some reason my template is not showing the amount of resource and gives me an…
Can you deploy Blueprints to several subscriptions through Azure Devops pipelines?
I have a simple azure blueprint that creates a resource group, application insights, and a query pack through a nested template. Is it possible for me to deploy this blueprint as code to several different subscriptions using an Azure Devops Pipeline? …
If a user is granted reader role on subscription level, but I want to remove his readre role for a particular resource group under this subscription
if a user is granted owner role on subscription level, but I want to remove his owner role for a particular resource group under this subscription. I understand this can be achieved by deny assignment. Therefore wants to know how to create blueprint for…
Powershell Blueprint Import Error
I am following this document to export/import blueprints: https://learn.microsoft.com/en-us/azure/governance/blueprints/how-to/import-export-ps Using Azure Powershell, I was able to export the blueprint from a management group to my local…
Is Azure Blueprints an equivalent of Terraform?
Is Azure Blueprints an equivalent of Terraform?
Define non compliance messages for policies on blueprint assignments
Hi, I know we can specify non compliance messages when assigning a policy but I can't find any details on how to specify it when assigning a policy via a blueprint assignment.
Azure DevOps and Azure Cloud: What are Are Correlation IDs for errors in Microsoft product family?
Hi all, I was wondering when we noticed some issue/errors across azure devops and azure cloud I noticed some time it shows correlation ids. I was wondering if its possible to use correlation ids to report issues on VisualStudio Report Problem…
Create/assign an existing Azure Blueprint sample via Terraform
Hi, I want to create an Azure blueprint with Terraform. In Azure, you can select an existing blueprint (sample, see screenshot) e.g. ISO 27001 or Australian Government ISM PROTECTED. I have found this documentation: blueprint_assignment but I don’t…
Seeking clarification about the differences between Infrastructure as Code and Azure Blueprints
Hello, I am unable to figure out if Infrastructure as Code and Azure Blueprints are same things or there is some crucial differences between them - Could you please help me out? Azure Blueprints empowers the end users to recreate a specific…
Azure prompt has wrong name
This seems like it should be obvious, but I'm not having any luck. My name is incorrect in the Azure Cloud Shell, and I'm not sure what setting I need to fix it. The prompt shows: david@Azure and my home dir shows /home/david but David is my…
Blueprint Assignment at Management Group Level
I have assigned a blueprint to a Management Group, but it seems to have taken a default subscription by its own for the assignment itself, I thought it was going to be assigned automatically for all subscriptions within the management group. is it the…
What is the managed identity for Azure Blueprints?
I'm trying to assign a Blueprint which creates a VMSS with a custom image. The custom image is in a shared image gallery in a different subscription so I need to use RBAC to allow access. I've created a role assignment in the shared image gallery which…
BluePrint Applying Updated Version
I have deployed a based Blue Print but anytime I create another version with an update. I see that my new version is creating a duplicate policy that was created in the base blue print.
Azure blueprint PCI v3.2.1:2018: A publicIPAddress resource is Non-Compliant for policy "Audit diagnostic setting"
Hi, we are experimenting with Azure Blueprints and the PCI-DSS standard. We have already got many resources compliant, such as virtual machines, which have the option "Diagnostic settings" in monitoring. However, the resource publicIPAddress…
Blueprints Dry Run/Test Run
Hi, Tried looking this up without much luck, is there an option to check what will happen when you apply an updated BluePrint? Terraform is quite nifty that it would tell you what it would do before you action something. This may be an important…