Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Policy Initiative 'Evaluate Private Link Usage Across All Supported Azure Resources' does not contain policy 'Azure AI Services resources should use Azure Private Link' #1406

Open
n-athan opened this issue Dec 5, 2024 · 0 comments

Comments

@n-athan
Copy link

n-athan commented Dec 5, 2024

Details of the scenario you tried and the problem that is occurring

I want to audit all Azure Resources to govern the Public Network Access. We use the builtin initiative Evaluate Private Link Usage Across All Supported Azure Resources to check as many resources as possible. The policy to audit private link usage on Azure AI services is not yet included in the initiative.

Verbose logs showing the problem

There is no policy about AI in the initiative, as shown with this query in the AZ CLI.

az policy set-definition show --name 7379ef4c-89b0-48b6-a5cc-fd3a75eaef93 --query "policyDefinitions[?contains(@.policyDefinitionReferenceId, 'ai')]" --output table
PolicyDefinitionId                                                                         PolicyDefinitionReferenceId
-----------------------------------------------------------------------------------------  ---------------------------------------------
/providers/Microsoft.Authorization/policyDefinitions/e8eef0a8-67cf-4eb4-9386-14b0e78733d4  AuditPrivateEndpointForAzureContainerRegistry
/providers/Microsoft.Authorization/policyDefinitions/9830b652-8523-49cc-b1b3-e17dce1127ca  AuditPrivateEndpointForAzureEventGridDomains

Suggested solution to the issue

Include policy definition Azure AI Services resources should use Azure Private Link (id /providers/Microsoft.Authorization/policyDefinitions/d6759c02-b87f-42b7-892e-71b3f471d782) in the policy initiative.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant