What's changed since pre-release v1.42.0-B0021:
- New features:
- Added March 2025 baselines
Azure.GA_2025_03andAzure.Preview_2025_03by @BernieWhite.
#3304- Includes rules released before or during March 2025.
- Marked
Azure.GA_2024_12andAzure.Preview_2024_12baselines as obsolete.
- Added March 2025 baselines
- New rules:
- Azure DNS:
- Check that public zones use DNSSEC by @BernieWhite.
#3201
- Check that public zones use DNSSEC by @BernieWhite.
- Azure SQL Database:
- Check that logical SQL servers have vulnerability assessment enabled by @BernieWhite.
#3196
- Check that logical SQL servers have vulnerability assessment enabled by @BernieWhite.
- Event Grid:
- Check that topics and domains use a minimum of TLS 1.2 by @BernieWhite.
#3306
- Check that topics and domains use a minimum of TLS 1.2 by @BernieWhite.
- Azure DNS:
- Updated rules:
- Azure Kubernetes Service:
- Updated
Azure.AKS.Versionto use1.30.10as the minimum version by @BernieWhite.
#3301
- Updated
- App Service:
- Updated SKUs support by
Azure.AppService.AvailabilityZoneby @Sjors-Boom.
#3299
- Updated SKUs support by
- Azure Managed Grafana:
- Bumped
Azure.Grafana.Versionto use version11as10is now depreciated by @BernieWhite.
#3293- Bumped rule set to
2025_03.
- Bumped rule set to
- Bumped
- Azure Kubernetes Service:
- General improvements:
- Added support for
failanddeployerfunctions during Bicep expansion by @BernieWhite.
#3308
- Added support for
- Engineering:
- Updated resource providers and policy aliases by @BernieWhite.
#3285
- Updated resource providers and policy aliases by @BernieWhite.
See change log.