Azure / enterprise-azure-policy-as-code

Enterprise-ready Azure Policy-as-Code (PaC) solution (includes Az DevOps pipeline)
https://azure.github.io/enterprise-azure-policy-as-code/
MIT License
437 stars 243 forks source link

Support for wildcars in the scope(s) segment of an exemptions definition #687

Open nikolaifa opened 5 months ago

nikolaifa commented 5 months ago

Is your feature request related to a problem? Please describe. We are using Azure Security Benchmark which includes the policy Storage accounts should use private link, which we'd like to disable for a specific set of our sub-resources. These resources are recognizable both by their name, which contains tfstate or their resource group name, that also contains tfstate.

Describe the solution you'd like I'd love support for wildcars for the scope(s) segment of an exemptions definition.

E.g.:

"scopes": [
      "/subscriptions/xxxxxxxxxxx/resourcegroups/rg-*-tfstate*",
      "/subscriptions/xxxxxxxxxxx/resourcegroups/RG2"
    ]

AB#44041

apybar commented 3 months ago

Adding to backlog