Azure/terraform-azurerm-caf-enterprise-scale v1.1.0

Policy updates and bug fixes

on GitHub

Release v1.1.0 introduces the following changes:

• BREAKING CHANGE: Replaced Deploy-ASC-Configuration Policy Assignment with Deploy-ASCDF-Config, utilizing built-in policies and also adds support for Microsoft Defender for open-source relational databases.
  • Fixing Add Defender support for Open-source relational databases #131.
  • Note: Will result in loss of policy compliance history.
  • Consider making a copy of the removed policy templates to a custom lib folder and using the archetype extension capability if you wish to retain the old Assignment to keep policy compliance history.
  • Requires an update to the configure_management_resources input variable:

{
  settings = {
    # (1 unchanged element hidden)
    security_center = {
      # (1 unchanged element hidden)
      config = {
        # (7 unchanged elements hidden)
        enable_defender_for_oss_databases  = true
        # (4 unchanged elements hidden)
      }
    }
  }
  # (3 unchanged elements hidden)
}

• Updates to Wiki documentation
• Multiple bug fixes covering:
  • Fix "managed parameters" for Enable-DDoS-VNET Policy Assignment at landing-zones scope (no issue logged)
  • Changing root_parent_id results in Management Groups not being deployed #190
  • Bug Report: Private DNS zone link in setting.connectivity.tf #204
  • Incorrect enforcementMode setting on Enable-DDoS-VNET Policy Assignment #216