The Azure Landing Zones (Enterprise-Scale) architecture provides prescriptive guidance coupled with Azure best practices, and it follows design principles across the critical design areas for organizations to define their Azure architecture
This pull request introduces significant changes to the eslzArm/eslzArm.json and docs/wiki/Whats-new.md files. The main changes are the deprecation of certain policies and the introduction of new ones, as well as the addition of a new initiative for Microsoft Defender for Endpoints. In addition, there are some adjustments in the eslzArm/eslzArm.json file to accommodate these new policies and initiatives.
Policy changes:
docs/wiki/Whats-new.md: Deprecated the custom policy "Storage Account set to minimum TLS and Secure transfer should be enabled" and replaced it with two built-in policies. Also deprecated the "Deploy-EncryptTransit" initiative and superseded it with "Deploy-EncryptTransit_20240509". Added a new custom policy "Deploy-Private-DNS-Generic" and a new initiative for Microsoft Defender for Endpoints.
Adjustments in eslzArm/eslzArm.json:
Added the "mdEnpointsAMAPolicyInitiative" and "mdEndpointsAMADeploymentName" variables. [1][2]
Added a new block of code to assign the new Microsoft Defender for Endpoints policy initiative to the intermediate root management group if the condition is true.
Overview/Summary
This pull request introduces significant changes to the
eslzArm/eslzArm.json
anddocs/wiki/Whats-new.md
files. The main changes are the deprecation of certain policies and the introduction of new ones, as well as the addition of a new initiative for Microsoft Defender for Endpoints. In addition, there are some adjustments in theeslzArm/eslzArm.json
file to accommodate these new policies and initiatives.Policy changes:
docs/wiki/Whats-new.md
: Deprecated the custom policy "Storage Account set to minimum TLS and Secure transfer should be enabled" and replaced it with two built-in policies. Also deprecated the "Deploy-EncryptTransit" initiative and superseded it with "Deploy-EncryptTransit_20240509". Added a new custom policy "Deploy-Private-DNS-Generic" and a new initiative for Microsoft Defender for Endpoints.Adjustments in
eslzArm/eslzArm.json
:Addition of a new policy assignment:
eslzArm/managementGroupTemplates/policyAssignments/DINE-MDEndpointsAMAPolicyAssignment.json
: Added a new policy assignment file for the Microsoft Defender for Endpoints policy initiative.Azure Public
As part of this Pull Request I have
main
branch/docs/wiki/whats-new.md
)