search

Azure / Enterprise-Scale

The Azure Landing Zones (Enterprise-Scale) architecture provides prescriptive guidance coupled with Azure best practices, and it follows design principles across the critical design areas for organizations to define their Azure architecture
https://aka.ms/alz
MIT License
1.73k stars 979 forks source link

Bug Report: Deny-LogicApps-Without-Https.json #1719

Closed rybal06 closed 3 months ago

rybal06 commented 3 months ago

Describe the bug

The policy has the same condition copied twice:

                        "anyOf": [
                            {
                                "field": "Microsoft.Web/sites/httpsOnly",
                                "exists": "false"
                            },
                            {
                                "field": "Microsoft.Web/sites/httpsOnly",
                                "equals": "false"
                            }
                        ]
                    }

Steps to reproduce

  1. View the policy in this repo
  2. Observe the duplication

Suggested Action

  1. Remove the duplicate condition from the policy and the "AnyOf" block.
teemukom commented 3 months ago

It's not duplicate: the first one checks if the field doesn't exist and the second one if it's value equals to false.