What's Changed
Bug fixes:
PostgreSQL Flexible Server ATP coverage — Fixed an issue where the Enforce-Guardrails-PostgreSQL initiative did not evaluate Azure Database for PostgreSQL Flexible Server resources for Advanced Threat Protection. The initiative now supports both PostgreSQL Single Server and Flexible Server resource types.
Managed disk public network access enforcement — Fixed an issue where the Deny-PublicPaaSEndpoints initiative did not expose the Deny option for managed disk public network access. Customers can now enforce the blocking of public network access on managed disks.
Private endpoint approval DNS automation — Fixed an issue where DNS records were not created after a private endpoint connection received manual approval from the resource owner. DNS records are now added automatically after approval.
Private endpoint network policy configuration — Fixed an issue where the private endpoint network policies value was hardcoded to Enabled. Added the penpValue parameter so the value can be configured according to deployment requirements.
Mandatory tag policy scope — Fixed an issue where the Audit-Tags-Mandatory policy used the All mode and incorrectly evaluated resources that do not support tags, including resource groups. The policy now uses Indexed mode to limit evaluation to applicable resources.
- feat: Update Policy Library (automated) by @cae-pr-creator[bot] in #1162
Full Changelog: v0.25.4...v0.25.5