v1.39.0-B0029

What's changed since pre-release v1.39.0-B0009:

• New rules:
  • Azure Kubernetes Service:
    • Verify that clusters have kube-audit logging disabled when not required by Benjamin Engeset (@BenjaminEngeset).
      #2450
    • Verify that clusters have the customer-controlled maintenance windows aksManagedAutoUpgradeSchedule and aksManagedNodeOSUpgradeSchedule configured by Benjamin Engeset (@BenjaminEngeset).
      #2444
  • Virtual Network:
    • Verify that zonal-deployed Azure firewalls uses Azure NAT Gateway for outbound access by Benjamin Engeset (@BenjaminEngeset).
      ##3005
    • Verify that subnets have disabled default outbound access for virtual machines by Benjamin Engeset (@BenjaminEngeset).
      #3001
• Updated rules:
  • Virtual Network:
    • Updated Azure.VNET.UseNSGs to correctly handle cases for special purpose and customer-excluded subnets by Benjamin Engeset (@BenjaminEngeset).
      #3007
• General improvements:
  • Add binding configuration to policy as rules docs by @BernieWhite.
    #2995

See change log.