search

Azure / bicep-registry-modules

Bicep registry modules
MIT License
465 stars 308 forks source link

[Feature Request]: Set default values to a secure value - API #771 #2451

Open AlexanderSehr opened 3 months ago

AlexanderSehr commented 3 months ago

Description

All default values should comply with a security baseline, e.g. NIST 800

The build-in policies of Azure can be used as a reference.

The task would be to scan over each of the following policies and make sure, that the module is per default complying to them.

The following policies are the NIST 800 ones:

\built-in-policies\policyDefinitions\API Management\ApiManagement_VNETEnabled_Audit.json

microsoft-github-policy-service[bot] commented 3 months ago

[!IMPORTANT] The "Needs: Triage :mag:" label must be removed once the triage process is complete!

[!TIP] For additional guidance on how to triage this issue/PR, see the BRM Issue Triage documentation.

AlexanderSehr commented 3 months ago

Hey @tony-box , I just migrated this issue over from CARML. Please take a look and triage if still relevant :)

tony-box commented 2 months ago

Will take a look. Thanks!