You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Setting UseOnelinePolicyStore to false does not support custom organization policies
Description
Feature request.
Some enterprises have policies restricting the use of Azure storage accounts (FinTech and data exfiltration concerns are one misuse case).
There is no documented (easy) way to create an organization extension according to the instructions at Extending AzSK Modules while disabling UseOnlinePolicyStore.
Steps to reproduce
In AzSKSettings.json, set UseOnlinePolicyStore: false
Follow the instructions in 'Extending AzSK Modules
Run a test and the *.ext.ps1 files are ignored
Expected behavior
A parameter like Get-AzSKOrganizationPolicyStatus -PolicyFolderPath LOCALEXTENSIONS
would allow for local extensions to be made and kept local.
Actual behavior
*.ext.ps1 files are ignored
As a work-around, one can fork the AzSK DevOpsKit and place the extensions directly in the forked SVT/* directory code. At that point the UseOnelinePolicyStore: false, will work, but this requires forking and altering AzSK.
The text was updated successfully, but these errors were encountered:
Title
Setting UseOnelinePolicyStore to false does not support custom organization policies
Description
Feature request.
Some enterprises have policies restricting the use of Azure storage accounts (FinTech and data exfiltration concerns are one misuse case).
There is no documented (easy) way to create an organization extension according to the instructions at Extending AzSK Modules while disabling UseOnlinePolicyStore.
Steps to reproduce
Expected behavior
A parameter like Get-AzSKOrganizationPolicyStatus -PolicyFolderPath LOCALEXTENSIONS
would allow for local extensions to be made and kept local.
Actual behavior
*.ext.ps1 files are ignored
As a work-around, one can fork the AzSK DevOpsKit and place the extensions directly in the forked SVT/* directory code. At that point the UseOnelinePolicyStore: false, will work, but this requires forking and altering AzSK.
The text was updated successfully, but these errors were encountered: