v1.25.0
What's changed since v1.24.2:
- New features:
- Experimental: Added
Azure.MCSB.v1which include rules aligned to the Microsoft Cloud Security Benchmark by @BernieWhite.
#1634
- Experimental: Added
- New rules:
- Defender for Cloud:
- Event Hub:
- Check Event Hub namespaces only uses TLS 1.2 version by Benjamin Engeset (@BenjaminEngeset).
#1995
- Check Event Hub namespaces only uses TLS 1.2 version by Benjamin Engeset (@BenjaminEngeset).
- Key Vault:
- Check if firewall is set to deny by Dimitri Zilber (@zilberd).
#2067
- Check if firewall is set to deny by Dimitri Zilber (@zilberd).
- Virtual Machine:
- Virtual machines should be fully deallocated and not stopped by David Reynolds (@dcrreynolds).
#88
- Virtual machines should be fully deallocated and not stopped by David Reynolds (@dcrreynolds).
- General improvements:
- Added support for Bicep
toObjectfunction by @BernieWhite.
#2014 - Added support for configuring a minimum version of Bicep by @BernieWhite.
#1935- Configure this option to increase the visibility of the version of the Bicep CLI used by PSRule for Azure.
- Set
AZURE_BICEP_CHECK_TOOLtotrueto check the Bicep CLI. - Set
AZURE_BICEP_MINIMUM_VERSIONto configure the minimum version. - If the Bicep CLI is not installed or the version is less than the minimum version an error will be reported.
- By default, the minimum Bicep version defaults to
0.4.451.
- Added support for Bicep custom types by @BernieWhite.
#2026
- Added support for Bicep
- Engineering:
- Bug fixes:
- Fixed SQL transparent data Encryption (TDE) works properly on all resources including exported resources by Dimitri Zilber (@zilberd).
#2059 - Fixed cases of exit code 5 with path probing by @BernieWhite.
#1901
- Fixed SQL transparent data Encryption (TDE) works properly on all resources including exported resources by Dimitri Zilber (@zilberd).
What's changed since pre-release v1.25.0-B0100:
- No additional changes.
See change log.