Comments (2)
I notice that if I update the file ServerConfigMetadata.json with
{
"Name" : "ARMControls.json",
"OverrideOffline" : true
},
It will use the customised controls. If I set it to
{
"Name" : "ARMControls.json"
},
It uses the default control. How do I make it use my customisation and also default if it doesn't exist in the org customisation file?
from devopskit-docs.
Hi there,
We're trying to specify our own controls to validate and check our arm templates. We notice however when we integrate the solution in Azure DevOps it still applies the default controls in addition to our own custom policy and proceeds giving the warning as listed in the subject.
How can we make sure the default control set is disabled? I've tried following along with the documentation but couldn't find a clear answer. Is there any updated documentation on MSFT side?
try this: https://blogs.msdn.microsoft.com/azuredev/2018/12/29/enforcing-security-controls-right-from-ci-cd-pipeline-with-azsk-deep-dive/
adding this to your ServerConfigMetadata.json file:
{
"Name" : "ARMControls.json",
"OverrideOffline":true
}
from devopskit-docs.
Related Issues (20)
- Documentation for YAML implementation?
- AzSK- App Service - Many control IDs should be specific for an app service (Microsoft.Web/sites)
- Parameter Files get skipped if ParameterFilePath and ARMTemplatePath are same Directory
- Security Scaner inherited permission on build definitions unable to fix HOT 3
- [Feature Request] Automatically confirm YES or NO for Get-AzSKAzureServicesSecurityStatus cmdlet
- **State drift occurred**: The attested state doesn't match with the current state. Attestation status has been reset.
- Error while running getpim from a Hosted Agent in release pipeline with SPN
- Unable to run Get-AzSKSecurityRecommendationReport
- Getting issue when using this ARM Template "raw" uri in "Deploy to Azure" button HOT 1
- Azure_VirtualMachine_DP_Enable_Disk_Encryption control is failing on using VirtualMachine ARM Template
- AzSK on YAML HOT 1
- problem with AzSK.AAD module HOT 1
- Problem installing with Az.AnalysisService HOT 2
- skipped files error the azure devops pipeline HOT 1
- Alternative? HOT 3
- running AzTS at the local computer
- Issue with PowerBI Template
- What command(s) do I run in the place of Set-AzSKPIMConfiguration in order to activate my PIM roles via script?
- [Error]: InvalidOperation: Could not find any resources that match the specified criteria.
- Assign PIM role to the service connection HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from devopskit-docs.