-
Notifications
You must be signed in to change notification settings - Fork 146
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
optionally deploy built-in Policy Initiatives for NIST 800-53, CMMC Level 3, or DOD IL5 #397
Conversation
Co-authored-by: Glenn Musa <[email protected]>
Co-authored-by: Glenn Musa <[email protected]>
Co-authored-by: Glenn Musa <[email protected]>
logAnalyticsWorkspaceResourceGroupName
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Need to revert back. The original was correct when testing it works as expected with original not with new line.
Original:
var modifiedAssignment = (environment().name =~ 'AzureCloud' && builtInAssignment =~ 'IL5' ? 'NIST' : builtInAssignment)
Example command: az deployment group create --resource-group mlz-rnvmkhkcgceda-operations --name sg-mlztest1 --template-file ./src/bicep/modules/policyAssignment.bicep --parameters builtInAssignment=CMMC logAnalyticsWorkspaceName=mlz-rnvmkhkcgceda-laws
Huh, my mistake. Looks like I need to read up on inline function evaluation in Bicep! My assumption was |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
minor changes for references and naming, everything worked great and deployed with NIST, IL5, and CMMC in AzureUsGovernment and AzureCloud
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
thanks @shawngib 🎉
* prefer local backends for terraform * add a Bicep Azure Sentinel module (#385) * Remove Client/Client Secret/Tenant Vars from Terraform Templates Co-authored-by: Bree Stryker <[email protected]> * add workflows to lint and build .bicep modules (#400) * disable verbose lint output (#402) * optionally deploy built-in Policy Initiatives for NIST 800-53, CMMC Level 3, or DOD IL5 (#397) * log activities from subscriptions used in a deployment into the Operations log analytics workspace (#412) * optionally deploy Azure Bastion Host from the base deployment (#406) Co-authored-by: Vidya Bala <[email protected]> Co-authored-by: Bree Stryker <[email protected]> Co-authored-by: Glenn Musa <[email protected]> Co-authored-by: Shawn Gibbs <[email protected]>
Description
Add parameter based deployment for Policy initiative deployment of NIST/CMMC/IL5 as needed.
Issue reference
The issue this PR will close: #387
Checklist
Please make sure you've completed the relevant tasks for this PR, out of the following list:
.vscode/extensions.json
.)