What's changed since v1.41.4:
- New features:
- Added March 2025 baselines
Azure.GA_2025_03andAzure.Preview_2025_03by @BernieWhite.
#3304- Includes rules released before or during March 2025.
- Marked
Azure.GA_2024_12andAzure.Preview_2024_12baselines as obsolete.
- Added March 2025 baselines
- New rules:
- Azure DNS:
- Check that public zones use DNSSEC by @BernieWhite.
#3201
- Check that public zones use DNSSEC by @BernieWhite.
- Azure SQL Database:
- Check that logical SQL servers have vulnerability assessment enabled by @BernieWhite.
#3196
- Check that logical SQL servers have vulnerability assessment enabled by @BernieWhite.
- Event Grid:
- Check that topics and domains use a minimum of TLS 1.2 by @BernieWhite.
#3306
- Check that topics and domains use a minimum of TLS 1.2 by @BernieWhite.
- Image Builder:
- Check that image builder build and validation scripts are pinned by @BernieWhite.
#2903
- Check that image builder build and validation scripts are pinned by @BernieWhite.
- Azure DNS:
- Updated rules:
- Azure Kubernetes Service:
- Updated
Azure.AKS.Versionto use1.30.10as the minimum version by @BernieWhite.
#3301
- Updated
- App Service:
- Updated SKUs support by
Azure.AppService.AvailabilityZoneby @Sjors-Boom.
#3299 - Updated
Azure.AppService.MinTLSto include TLS 1.3 as a valid minimum version by @BernieWhite.
#3269
- Updated SKUs support by
- Azure Managed Grafana:
- Bumped
Azure.Grafana.Versionto use version11as10is now depreciated by @BernieWhite.
#3293- Bumped rule set to
2025_03.
- Bumped rule set to
- Bumped
- Azure Kubernetes Service:
- General improvements:
- Added support for
failanddeployerfunctions during Bicep expansion by @BernieWhite.
#3308 - Added a new quickstart guide for using Azure Pipelines with PSRule by @that-ar-guy.
#3220 - Added additional exclusions to policies for
Azure.AppService.MinTLSby @BernieWhite.
#1731
- Added support for
- Engineering:
- Updates to WAF documentation by @BernieWhite.
#2570 - Updated resource providers and policy aliases by @BernieWhite.
#3285
- Updates to WAF documentation by @BernieWhite.
What's changed since pre-release v1.42.0-B0066:
- No additional changes.
See change log.