v1.47.0-B0060

What's changed since v1.46.0:

• New features:
  • Added December 2025 baselines Azure.GA_2025_12, Azure.Preview_2025_12, and Azure.CAF_2025_12 by @BernieWhite.
    #3642
    • Includes rules released before or during December 2025.
    • Marked Azure.GA_2025_09 and Azure.Preview_2025_09 baselines as obsolete.
• New rules:
  • Added naming format rules for AKS, Container Apps, Service Fabric, Cosmos DB, Redis, and SQL resources.
    #3548
  • App Configuration:
    • Check that replica locations are in allowed regions by @BernieWhite.
      #3441
  • Azure Cache for Redis:
    • Check for legacy Azure Cache for Redis instances by Benjamin Engeset (@BenjaminEngeset).
      #3605
    • Check resources naming matches configured name format by @BernieWhite.
      #3548
      • The name format can be configured by the following configuration options:
        • AZURE_REDIS_CACHE_NAME_FORMAT
        • AZURE_REDIS_ENTERPRISE_NAME_FORMAT
    • Added configured name format by @BernieWhite.
  • Azure Cache for Redis Enterprise and Enterprise Flash:
    • Check for deprecated Redis Enterprise and Enterprise Flash SKUs by Benjamin Engeset (@BenjaminEngeset).
      #3606
  • Azure Database for MySQL:
    • Check resources naming matches configured name format by @BernieWhite.
      #3548
      • The name format can be configured by the following configuration options:
        • AZURE_MYSQL_SERVER_NAME_FORMAT
  • Azure Database for PostgreSQL:
    • Check resources naming matches configured name format by @BernieWhite.
      #3548
      • The name format can be configured by the following configuration options:
        • AZURE_POSTGRESQL_SERVER_NAME_FORMAT
  • Azure Kubernetes Service:
    • Check resources naming matches configured name format by @BernieWhite.
      #3548
      • The name format can be configured by the following configuration options:
        • AZURE_AKS_CLUSTER_NAME_FORMAT
        • AZURE_AKS_SYSTEM_POOL_NAME_FORMAT
        • AZURE_AKS_USER_POOL_NAME_FORMAT
  • Container Apps:
    • Check resources naming matches configured name format by @BernieWhite.
      #3548
      • The name format can be configured by the following configuration options:
        • AZURE_CONTAINER_APP_NAME_FORMAT
        • AZURE_CONTAINER_APP_ENVIRONMENT_NAME_FORMAT
        • AZURE_CONTAINER_APP_JOB_NAME_FORMAT
  • Container Instance:
    • Check resources naming matches configured name format by @BernieWhite.
      #3548
      • The name format can be configured by the following configuration option:
        • AZURE_CONTAINER_INSTANCE_NAME_FORMAT
  • Container Registry:
    • Check resources naming matches configured name format by @BernieWhite.
      #3548
      • The name format can be configured by the following configuration option:
        • AZURE_CONTAINER_REGISTRY_NAME_FORMAT
  • Cosmos DB:
    • Check that Cosmos DB accounts have availability zones enabled by Benjamin Engeset (@BenjaminEngeset).
      #3055
    • Check that MongoDB vCore clusters use Microsoft Entra ID authentication by Benjamin Engeset (@BenjaminEngeset).
      #3369
    • Check that MongoDB vCore clusters have availability zones enabled by Benjamin Engeset (@BenjaminEngeset).
      #3586
    • Check resources naming matches configured name format by @BernieWhite.
      #3548
      • The name format can be configured by the following configuration options:
        • AZURE_COSMOS_CASSANDRA_NAME_FORMAT
        • AZURE_COSMOS_DATABASE_NAME_FORMAT
        • AZURE_COSMOS_GREMLIN_NAME_FORMAT
        • AZURE_COSMOS_MONGO_NAME_FORMAT
        • AZURE_COSMOS_NOSQL_NAME_FORMAT
        • AZURE_COSMOS_POSTGRESQL_NAME_FORMAT
        • AZURE_COSMOS_TABLE_NAME_FORMAT
  • Data Explorer:
    • Check that public network access is disabled by Benjamin Engeset (@BenjaminEngeset).
      #3114
  • Event Hub:
    • Check that zone redundancy is enabled for Event Hub namespaces in supported regions by Benjamin Engeset (@BenjaminEngeset).
      #3029
  • Managed Instance for Apache Cassandra:
    • Check that Managed Instance for Apache Cassandra clusters have availability zones enabled by Benjamin Engeset (@BenjaminEngeset).
      #3592
  • Managed Grafana:
    • Check that zone redundancy is enabled for Grafana workspaces in supported regions by Benjamin Engeset (@BenjaminEngeset).
      #3294
  • Service Fabric:
    • Check resources naming matches configured name format by @BernieWhite.
      #3548
      • The name format can be configured by the following configuration option:
        • AZURE_SERVICE_FABRIC_CLUSTER_NAME_FORMAT
        • AZURE_SERVICE_FABRIC_MANAGED_CLUSTER_NAME_FORMAT
  • SQL Database:
    • Check resources naming matches configured name format by @BernieWhite.
      #3548
      • The name format can be configured by the following configuration option:
        • AZURE_SQL_DATABASE_NAME_FORMAT
        • AZURE_SQL_SERVER_NAME_FORMAT
        • AZURE_SQL_ELASTIC_POOL_NAME_FORMAT
        • AZURE_SQL_JOB_AGENT_NAME_FORMAT
  • SQL Managed Instance:
    • Check resources naming matches configured name format by @BernieWhite.
      #3548
      • The name format can be configured by the following configuration option:
        • AZURE_SQL_MI_NAME_FORMAT
• Updated rules:
  • Application Gateway Policy:
    • Updated Azure.AppGwWAF.RuleGroups to use Microsoft Default Rule Set instead of legacy OWASP rule set by Benjamin Engeset (@BenjaminEngeset).
      #3553
  • Cosmos DB:
    • Renamed Azure.Cosmos.DisableLocalAuth to Azure.Cosmos.NoSQLLocalAuth to reflect it applies only to NoSQL API by @BernieWhite.
      #3576
• Engineering:
  • Bump Microsoft.Extensions.Logging.Console from 8.0.0 to 10.0.1
    #3627
  • Bump Microsoft.Extensions.Hosting from 9.0.10 to 10.0.1
    #3626

See the change log for details.