Azure Sentinel Policies - Intel Cloud Optimization Modules

© Copyright 2022, Intel Corporation

Sentinel Policies for Azure Modules

This library, provides prescriptive Terraform and Sentinel policies that can be used to establish a seemless and performant baseline Terraform configuration for Microsoft Azure services. The policies that are contained in this library are based on the Open-Source Database Tuning Guide on 3rd Generation Intel® Xeon® Scalable Processors Based Platform. Terraform Cloud/Enterprise users can use the policies in this library to establish a foundational level of instance verification and enforcement for the database services that they are adopting in Microsoft Azure.

---

Policies included

• intel-azurerm-cosmosdb-cassandra-datacenter-deny-unapproved-instance-types (docs | code)
• intel-azurerm-databricks-cluster-deny-unapproved-instance-types (docs | code)
• intel-azurerm-databricks-cluster-deny-unapproved-runtime-engines (docs | code)
• intel-azurerm-databricks-cluster-enforce-spark-conf (docs | code)
• intel-azurerm-kubernetes-cluster-deny-unapproved-instance-type (docs | code)
• intel-azurerm-kusto-cluster-deny-unapproved-instance-types (docs | code)
• intel-azurerm-linux-virtual-machine-deny-unapproved-instance-type (docs | code)
• intel-azurerm-mysql-flexible-server-deny-unapproved-instance-types (docs | code)
• intel-azurerm-mssql-server-deny-unapproved-instance-types (docs | code)
• intel-azurerm-postgresql-flexible-server-deny-unapproved-instance-types (docs | code)
• intel-azurerm-service-plan-deny-unapproved-instance-types (docs | code)
• intel-azurerm-windows-web-app-enforce-http2 (docs | code)
• intel-azurerm-windows-web-app-enforce-https (docs | code)
• intel-azurerm-windows-web-app-enforce-minimum-tls (docs | code)

---