fix: Add missing DNS zones to policy assignment #1599
bicep-build-to-validate.yml
on: pull_request
Bicep Build & Lint All Modules
4m 38s
Test Azure Well-Architected Framework (PSRule)
3m 8s
Annotations
10 errors and 11 warnings
Test Azure Well-Architected Framework (PSRule)
Failed to expand bicep source '/home/runner/work/ALZ-Bicep/ALZ-Bicep/infra-as-code/bicep/modules/hubNetworking/samples/baseline.sample.bicep'. Exception calling "GetBicepResources" with "2" argument(s): "Unable to expand resources because the source file '/home/runner/work/ALZ-Bicep/ALZ-Bicep/infra-as-code/bicep/modules/hubNetworking/samples/baseline.sample.bicep' was not valid. An error occurred evaluating expression '[concat(createArray(createObject('id', resourceId('Microsoft.Network/virtualNetworks', parameters('parHubNetworkName')), 'name', variables('varGwConfig')[copyIndex()].ipConfigurationName, 'properties', createObject('publicIPAddress', createObject('id', reference(format('modGatewayPublicIp[{0}]', copyIndex())).outputs.outPublicIpId.value), 'subnet', createObject('id', resourceId('Microsoft.Network/virtualNetworks/subnets', parameters('parHubNetworkName'), 'GatewaySubnet'))))), if(variables('varGwConfig')[copyIndex()].activeActive, createArray(createObject('id', resourceId('Microsoft.Network/virtualNetworks', parameters('parHubNetworkName')), 'name', variables('varGwConfig')[copyIndex()].ipConfigurationActiveActiveName, 'properties', createObject('publicIPAddress', createObject('id', reference(format('modGatewayPublicIpActiveActive[{0}]', copyIndex())).outputs.outPublicIpId.value), 'subnet', createObject('id', resourceId('Microsoft.Network/virtualNetworks/subnets', parameters('parHubNetworkName'), 'GatewaySubnet'))))), createArray()))]' line 6723. The language expression property 'ipConfigurationName' doesn't exist."
|
Test Azure Well-Architected Framework (PSRule)
AZR-000430: alz-Vpn-Gateway failed Azure.VNG.MaintenanceConfig. Use a customer-controlled maintenance configuration for virtual network gateways.
|
Test Azure Well-Architected Framework (PSRule)
AZR-000430: alz-ExpressRoute-Gateway failed Azure.VNG.MaintenanceConfig. Use a customer-controlled maintenance configuration for virtual network gateways.
|
Test Azure Well-Architected Framework (PSRule)
AZR-000399: alz-azfwpolicy-eastus failed Azure.Firewall.PolicyMode. Deny high confidence malicious IP addresses, domains and URLs.
|
Test Azure Well-Architected Framework (PSRule)
AZR-000429: alz-azfw-eastus failed Azure.Firewall.AvailabilityZone. Deploy firewall instances using availability zones in supported regions to ensure high availability and resilience.
|
Test Azure Well-Architected Framework (PSRule)
AZR-000395: pip-minimum-ip failed Azure.PublicIP.MigrateStandard. Use the Standard SKU for Public IP addresses as the Basic SKU will be retired.
|
Test Azure Well-Architected Framework (PSRule)
AZR-000359: minimum managementGroups failed Azure.Deployment.Name. Nested deployments should meet naming requirements of deployments.
|
Test Azure Well-Architected Framework (PSRule)
AZR-000359: baseline managementGroups failed Azure.Deployment.Name. Nested deployments should meet naming requirements of deployments.
|
Test Azure Well-Architected Framework (PSRule)
AZR-000104: alz-azfwpolicy-[parameters('parLocation')] failed Azure.Firewall.PolicyName. Firewall policy names should meet naming requirements.
|
Test Azure Well-Architected Framework (PSRule)
AZR-000399: alz-azfwpolicy-[parameters('parLocation')] failed Azure.Firewall.PolicyMode. Deny high confidence malicious IP addresses, domains and URLs.
|
Test Azure Well-Architected Framework (PSRule)
Using invariant culture may cause rule infomation to be displayed incorrectly. Consider using -Culture or set the Output.Culture option.
|
Test Azure Well-Architected Framework (PSRule)
The option 'Execution.NotProcessedWarning' is deprecated and will be removed with PSRule v3. See http://aka.ms/ps-rule/deprecations for more detail.
|
Test Azure Well-Architected Framework (PSRule)
Rule 'PSRule.Rules.Azure\Azure.NSG.LateralTraversal' was suppressed by suppression group '.\ALZ.NSGForBastion' for 'nsg-AzureBastionSubnet'. Ignore NSG lateral movement rule for Azure Bastion as this is needed for Bastion to work.
|
Test Azure Well-Architected Framework (PSRule)
Rule 'PSRule.Rules.Azure\Azure.VNET.UseNSGs' was suppressed by suppression group '.\ALZ.MinimumSample' for 'alz-hub-eastus'. Ignore the minimum sample configuration.
|
Test Azure Well-Architected Framework (PSRule)
Rule 'PSRule.Rules.Azure\Azure.PublicIP.AvailabilityZone' was suppressed by suppression group '.\ALZ.MinimumSample' for 'alz-hub-eastus'. Ignore the minimum sample configuration.
|
Test Azure Well-Architected Framework (PSRule)
Rule 'PSRule.Rules.Azure\Azure.VNG.VPNAvailabilityZoneSKU' was suppressed by suppression group '.\ALZ.MinimumSample' for 'alz-hub-eastus'. Ignore the minimum sample configuration.
|
Test Azure Well-Architected Framework (PSRule)
Rule 'PSRule.Rules.Azure\Azure.PublicIP.StandardSKU' was suppressed by suppression group '.\ALZ.MinimumSample' for 'alz-hub-eastus'. Ignore the minimum sample configuration.
|
Test Azure Well-Architected Framework (PSRule)
Rule 'PSRule.Rules.Azure\Azure.VNG.VPNActiveActive' was suppressed by suppression group '.\ALZ.MinimumSample' for 'alz-hub-eastus'. Ignore the minimum sample configuration.
|
Test Azure Well-Architected Framework (PSRule)
Rule 'PSRule.Rules.Azure\Azure.Firewall.Mode' was suppressed by suppression group '.\ALZ.MinimumSample' for 'alz-hub-eastus'. Ignore the minimum sample configuration.
|
Test Azure Well-Architected Framework (PSRule)
Rule 'PSRule.Rules.Azure\Azure.VNET.UseNSGs' was suppressed by suppression group '.\ALZ.MinimumSample' for 'alz-bastion-PublicIP'. Ignore the minimum sample configuration.
|
Bicep Build & Lint All Modules
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|