github Azure/enterprise-azure-policy-as-code v3.0
Pipeline simplification and automated roleDefinitionIds

latest releases: v11.3.1, v11.3.0, v11.2.15...
3 years ago
  • roleDefinitionIds are now calculating based on the Initiative and Policies being assigned instead of an explicit definition in the assignment files definitionEntry. The system will display a warning that you can remove the explicit roleDefinitionIds.
  • Improved default folders and file names. The folder defaults use to environment/pipeline variables PAC_DEFINITIONS_FOLDER, PAC_OUTPUT_FOLDER, and PAC_INPUT_FOLDER. The code simplifies the number of parameters needed for the scripts and therefore simplify the pipeline definition. This change is non-breaking since the old parameters still work and override the defaults.
  • Simplified the starter four (4) pipelines to one (1) pipeline.yml.
    • Variable isBrownfield: false replaces the separate pipelines for brownfield
    • Siple pipelines no longer exist, the new pipeline always uses a separate stage for Role Assignments.
    • Pipeline is written for three (3) tenants; if you have fewer tenants delete the extra stages. Do not change the stage names, only modify the displayNames.
    • Pipeline has publish-artifact steps for either Azure DevOps Server (onprem - currently commented out) or Azure DevOps Service (SaaS - currently active in starter pipeline.

Don't miss a new enterprise-azure-policy-as-code release

NewReleases is sending notifications on new releases.