search

Azure / PSRule.Rules.Azure

Rules to validate Azure resources and infrastructure as code (IaC) using PSRule.
https://azure.github.io/PSRule.Rules.Azure/
MIT License
394 stars 86 forks source link

WAF Alignments of rules - wave 1 #2493

Closed BernieWhite closed 6 months ago

BernieWhite commented 1 year ago

Existing rule

No response

Suggested rule

Azure Verified Modules has identified rules that possibly don't have clear WAF linkage. Since PSRule for Azure is WAF aligned we want the default rule sets to only include WAF aligned rules.

Other related discussion: Azure/Azure-Verified-Modules#349

So, any non-WAF rules should be handled by:

  1. Make them opt-in only, and not run by default. OR
  2. Update and link them to WAF.

Pillar

None

Additional context

Azure Verified Modules has identified rules that don't have clear WAF linkage. Since PSRule for Azure is WAF aligned we want the default rule sets to only include WAF aligned rules.

So, any non-WAF rules should be handled by:

  1. Make them opt-in only, and not run by default. OR
  2. Update and link them to WAF.

Review

rahalan commented 10 months ago

adding https://azure.github.io/PSRule.Rules.Azure/en/rules/Azure.VM.UseHybridUseBenefit/