Azure/ALZ-Bicep v0.16.4

on GitHub

Summary

Another packed release with lots of great enhancements and community contributions 🥳😍

At a high level we have added:

• The latest upstream policy refresh from the ALZ repo
  • See the What's New wiki page in the ALZ repo for more info https://aka.ms/alz/whatsnew
• Added privatelink.azuredatabricks.net Private DNS Zone
• AAD Renamed to Entra ID
• Added ability to specify a fallback/failover vNet to link all your Private Link Private DNS Zones too - thanks @Acenl12
• Added VPN GW P2S support in Hub & Spoke model - thanks @juang903
• Azure Firewall changes:
  • Now able to specify Custom DNS Servers in DNS proxy feature - thanks @juang903
  • Now able to specify Threat Intel Mode - thanks @oZakari
  • Outputs now available for Private IP address of Azure Firewall
• Multiple Accelerator enhancements - thanks @MilesCameron-DMs & @oZakari
• Our GitHub Issues now are using GitHub Issue Forms, for an easier expeirence - thanks @jhajduk-microsoft

Things to be aware of

No breaking changes, don't worry 👍

But as part of the policy refresh we have added support for Azure Databricks Private Link/Endpoint configuration in the Deploy-Private-DNS-Zones initative. This requires the privatelink.azuredatabricks.net Private DNS Zone to exist.

Therefore we have updated our Private DNS Zone, Hub Networking & Virtual WAN Modules to deploy this new zone, but if you have made any customizations but want to take our policies in, please be aware that you'll need to ensure this zone is added to your environment 👍

What's Changed

• Acceleratorpics by @MilesCameron-DMs in #579
• Updates to Accelerator Documentation by @oZakari in #614
• Update Policy Library (automated) by @cae-pr-creator in #619
• Github Issue forms by @jhajduk-microsoft in #593
• Update ALZ Repo Bicep with Entra product names by @lachaves in #621
• Update Policy Library (automated) by @cae-pr-creator in #623
• Add fallback vnet for failover dns resolving. by @Acenl12 in #601
• Corrected Accelerator links and steps by @oZakari in #628
• Azure Firewall custom DNS server by @juang903 in #615
• Add Azure Firewall Private IPs as Output for VWAN Modules by @jtracey93 in #631
• Update Accelerator docs for ALZ-PowerShell-Module by @oZakari in #636
• BugFix-ParTopLevelManagementGroupPrefix-description-change by @oZakari in #637
• VPN Gateway P2S support by @juang903 in #617
• Update Policy Library (automated) by @cae-pr-creator in #639
• Add threat intel mode property for applicable firewall resources by @oZakari in #644

New Contributors

• @Acenl12 made their first contribution in #601

Full Changelog: v0.16.3...v0.16.4