Liz Kim

PM lead for #AzureGovernance

Product owner for #AzurePolicy
Public Preview Dec '17
General Availability May '18

[Azure Governance @AzureGovernance]

🚨 Azure Governance is proud to share exciting announcements about #Microsoftignite 2023 in the tread below!

🎉 Register here: https://t.co/gcuM2haQVt to attend our session on Thurs 11/16 @ 4 PM PST and hear all the exciting Azure Governance news!

[Neha Kulkarni @NehaKulkarniARM]

Want to learn how to govern your Kubernetes clusters using #AzurePolicy for #Kubernetes? Have ideas on what we should work on next? We'd love to chat! Fill out this form so we can reach out: https://t.co/eolBleJ9WG

[Shannon Hicks @shanhix1_MSFT]

Want to be more involved with #AzurePolicy & #AzureGovernance? Join our calls for announcements + Q&A(https://t.co/LACGHQhlM4) & sign up for a 30-min discussion on upcoming policy investments: resource type dependencies, rollout/versioning, docs, portal(https://t.co/S1A8U3P0VU)!

[Liz Kim @lizkim101]

@ikiris It shows up in the raw response, but not in the 'friendly' UI for VM-create UX. We'll get it updated!

[Liz Kim @lizkim101]

Custom deny messages are out!!! Return friendly messages when someone is denied because of your policy :) Message gets returned in CLI/ Powershell/ API alike. #AzurePolicy #AzureGovernance #Azure

[ahmed khamessi @ahmed_khamessi]

Checkout my blog post about Azure Policy for AKS and how it works behind the scenes with Gatekeeper #Azure #AKS #PodSecurityPolicy #kubernetes #OPA #Gatekeeper @lizkim101 https://t.co/7m6qeSwaFq

[Kristian Nese @KristianNese]

If you haven't explored Azure Policy with "deployIfNotExist" yet, I highly recommend you to do so. This will help you to reduce your codebase to operate your environment, enable autonomy, and ensure continuous compliance. https://t.co/IhiMigT8wR

[Liz Kim @lizkim101]

Integrated experience in #AzurePolicy to export policy definitions to #Github!

[M. Raiyan Alam @RaiyanAlam5]

Get started with Managing Azure policies as CODE in few simple steps!
Learn more at: https://t.co/HUoOJGybd6

#Azure #Governance #AzurePolicy

[M. Raiyan Alam @RaiyanAlam5]

Get started with Managing Azure policies as CODE in few simple steps!
Learn more at: https://t.co/HUoOJGybd6

#Azure #Governance #AzurePolicy

[Microsoft Dev Docs @docsmsft]

Brand new VM and no idea what Azure Policy to use? Check out the new Recommended Policies experience, right on your VM in Azure portal!

Details: https://t.co/9e6H170gYF

#FundamentalsFriday
#AzurePolicy
#AzureGovernance
@LizKim101 @jochan_msft @tigran25

[Jim Britt #BlackLivesMatter @JimBrittPhotos]

Great News! The scripts hosted here: https://t.co/EglWQ7xD5g now support running in Azure DevOps (with an -ADO switch) to allow you to integrate Azure Policy for Azure Diagnostics into your @AzureDevOps Pipeline to enable compliance and remediation is done automatically!

[M. Raiyan Alam @RaiyanAlam5]

Triggering @Azure compliance evaluation scans from GitHub Workflows just got easier! Check out the new Azure Policy Compliance Scan action: https://t.co/tG7uq7WQCp

[Liz Kim @lizkim101]

Easy assessment for NIST 800, CIS & ASB initiatives using #AzurePolicy!

[David Coulter @DCtheGeek]

Check out the #AzurePolicy Regulatory Compliance feature (preview)! The built-in initiatives for Azure Security Benchmark, CIS Microsoft Azure Foundations Benchmark, and NIST SP 800-53 R4 have already been updated and doc'ed (find them under Samples). https://t.co/CGNeCbnxHz

[M. Raiyan Alam @RaiyanAlam5]

Hello @Azure users,
If your organization uses Azure Policy and is managing policies as code through a source control Repo ... we would love to talk with you. What works? What doesn't? What can be better?
DM me!
#AzurePolicy #DevOps #Azure

[ShareGate @sharegatetools]

Still unsure how to increase #vibility and control in #Azure? 🤔
Microsoft pros, @lizkim101 and @jochan_msft, will talk about how to implement control and governance using #AzurePolicy!

Join them, it's free 😃https://t.co/RkR9cKHLA2

#Microsoftazure #governance #SGDeploy

[Liz Kim @lizkim101]

@Rupanter We're investigating export. I don't think we'll have direct integration with LA, but rather an endpoint agnostic approach whether it's for LA, Splunk, storage, etc. Count compliance per policy is available today via Microsoft.PolicyInsights API.

[Liz Kim @lizkim101]

Requesting #AzurePolicy feedback: should 'Total' resource count include exempted resources? Total resource count = compliant + non-compliant + exempted resources? 🤷‍♀️
P.S. we will start showing a list of exempted resources in policy experience

[Liz Kim @lizkim101]

@MrTaoYang @LumagateNa @az_Mantas @StanZhelyazkov @az_Mantas we'll have exception for policies within an initiatives this summer. Just give us a few more months! 😊

[Liz Kim @lizkim101]

@MrTaoYang @LumagateNa @az_Mantas @StanZhelyazkov If you are looking to exclude the policy for the assignment, parameterize the effect & use 'disable' effect. If you are looking to exclude specific resource/ child scope from a policy within an initiative, it's something we are working on rn.

[Liz Kim @lizkim101]

@pzerger @MrTaoYang @StanZhelyazkov @LumagateNa @az_Mantas Introducing a parameter comes with its own baggage, since you can't remove a parameter after assigning the initiative.

[Liz Kim @lizkim101]

@pzerger @MrTaoYang @StanZhelyazkov @LumagateNa @az_Mantas The plan is to have most of the built-ins parameterized. I don't consider parameterized effect a best practice, since it's useful in limited scenarios.