Azure / CanadaPubSecALZ

This reference implementation is based on Cloud Adoption Framework for Azure and provides an opinionated implementation that enables ITSG-33 regulatory compliance by using NIST SP 800-53 Rev. 4 and Canada Federal PBMM Regulatory Compliance Policy Sets.
MIT License
124 stars 86 forks source link

Network security group support for private endpoints subnet #333

Closed SenthuranSivananthan closed 2 years ago

SenthuranSivananthan commented 2 years ago

Overview/Summary

Enable network security policies on the Private Endpoint subnet. This subnet is used to deploy private endpoints for PaaS services such as storage account, key vault, etc.

A default network security group is now added on this subnet to allow for NSG based ACLs.

This PR fixes/adds/changes/removes

Fixes #332

Breaking Changes

None. Network Security Group by default allows traffic within the virtual network.

Testing Evidence

Machine Learning archetype

image

Healthcare archetype

image

As part of this Pull Request I have