{ "generatedAt": "2026-10-14T11:26:22.748Z", "source": "Diff between two consecutive runs of azure-policies/fetch-updates.ps1", "retentionDays": 180, "lastRunEntries": 0, "totalEntries": 71, "entries": [ { "detectedAt": "2026-10-02T12:06:12.975Z", "kind": "policy", "change": "added", "name": "e117c61a-cbc6-4f07-9c63-e9f93e5c0b69", "displayName": "[Preview]: Configure Quick Machine Recovery (QMR) on Windows machines", "category": "Guest Configuration" }, { "detectedAt": "2026-10-02T12:06:12.975Z", "kind": "policy", "change": "added", "name": "bc5c669d-8fe7-4b64-b570-4ee0a86aa5a8", "displayName": "Azure App Configuration resources should be associated with an NSP (Network Security Perimeter)", "category": "App Configuration" }, { "detectedAt": "2026-10-02T12:06:12.975Z", "kind": "policy", "change": "added", "name": "c6d24366-daf2-401a-bfd5-73cd3d3a01dc", "displayName": "Configure Azure App Configuration resources to associate with NSP (Network Security Perimeter)", "category": "App Configuration" }, { "detectedAt": "2026-10-02T12:06:12.975Z", "kind": "policy", "change": "modified", "name": "59efceea-0c96-497e-a4a1-4eb2290dac15", "displayName": "Configure periodic checking for missing system updates on azure virtual machines", "category": "Azure Update Manager", "fields": [ { "field": "version", "from": "4.10.0", "to": "4.11.0" } ] }, { "detectedAt": "2026-10-02T12:06:12.975Z", "kind": "policy", "change": "modified", "name": "b889a06c-ec72-4b03-910a-cb169ee18721", "displayName": "Deploy Diagnostic Settings for Logic Apps to Log Analytics workspace", "category": "Monitoring", "fields": [ { "field": "version", "from": "1.0.0", "to": "1.1.0" } ] }, { "detectedAt": "2026-10-02T12:06:12.975Z", "kind": "policy", "change": "modified", "name": "5485eac0-7e8f-4964-998b-a44f4f0c1e75", "displayName": "Kubernetes cluster Windows containers should not run as ContainerAdministrator", "category": "Kubernetes", "fields": [ { "field": "version", "from": "1.2.0", "to": "2.0.0" } ] }, { "detectedAt": "2026-10-02T12:06:12.975Z", "kind": "policy", "change": "modified", "name": "bd876905-5b84-4f73-ab2d-2e7a7c4568d9", "displayName": "Machines should be configured to periodically check for missing system updates", "category": "Azure Update Manager", "fields": [ { "field": "version", "from": "3.9.0", "to": "3.10.0" } ] }, { "detectedAt": "2026-10-02T12:06:12.975Z", "kind": "policy", "change": "modified", "name": "ba0df93e-e4ac-479a-aac2-134bbae39a1a", "displayName": "Schedule recurring updates using Azure Update Manager", "category": "Azure Update Manager", "fields": [ { "field": "version", "from": "3.15.0", "to": "3.16.0" } ] }, { "detectedAt": "2026-10-02T12:06:12.975Z", "kind": "policy", "change": "modified", "name": "9905ca54-1471-49c6-8291-7582c04cd4d4", "displayName": "Set prerequisite for Scheduling recurring updates on Azure virtual machines.", "category": "Azure Update Manager", "fields": [ { "field": "version", "from": "1.4.0", "to": "1.5.0" } ] }, { "detectedAt": "2026-10-02T12:06:12.975Z", "kind": "policy", "change": "modified", "name": "42ba1d72-e90f-42f8-bf99-5a1351eed2b1", "displayName": "Sets Kubernetes cluster containers CPU limits to default values in case not present.", "category": "Kubernetes", "fields": [ { "field": "version", "from": "1.3.1", "to": "1.4.0" } ] }, { "detectedAt": "2026-09-30T12:08:17.288Z", "kind": "initiative", "change": "modified", "name": "bb522ac1-bc39-4957-b194-429bcd3bcb0b", "displayName": "[Deprecated]: Azure Security Benchmark v2", "category": "Regulatory Compliance", "fields": [ { "field": "version", "from": "11.13.0-deprecated", "to": "11.14.0-deprecated" } ] }, { "detectedAt": "2026-09-30T12:08:17.288Z", "kind": "initiative", "change": "modified", "name": "f1fe6a81-eee9-47b8-9f7f-80685141209e", "displayName": "[Preview]: Enforce Encryption-in-Transit across Azure Services - TLS Version", "category": "Sovereignty", "fields": [ { "field": "version", "from": "1.1.0-preview", "to": "1.2.0-preview" }, { "field": "policyCount", "from": "20", "to": "29" } ] }, { "detectedAt": "2026-09-30T12:08:17.288Z", "kind": "initiative", "change": "modified", "name": "b71f6054-d890-4c78-b809-2ae9dc6a0cfc", "displayName": "[Preview]: Private Endpoint configured across Azure Services", "category": "Sovereignty", "fields": [ { "field": "version", "from": "1.0.0-preview", "to": "1.1.0-preview" }, { "field": "policyCount", "from": "40", "to": "48" } ] }, { "detectedAt": "2026-09-30T12:08:17.288Z", "kind": "initiative", "change": "modified", "name": "a3d07baa-2640-4810-9814-c8c4bbfc21a6", "displayName": "[Preview]: Restrict Public Network Access across Azure Services", "category": "Sovereignty", "fields": [ { "field": "version", "from": "1.0.0-preview", "to": "1.1.0-preview" }, { "field": "policyCount", "from": "44", "to": "51" } ] }, { "detectedAt": "2026-09-30T12:08:17.288Z", "kind": "initiative", "change": "modified", "name": "c047ea8e-9c78-49b2-958b-37e56d291a44", "displayName": "Deployment safeguards should help guide developers towards AKS recommended best practices", "category": "Kubernetes", "fields": [ { "field": "version", "from": "3.0.0", "to": "3.1.0" } ] }, { "detectedAt": "2026-09-30T12:08:17.288Z", "kind": "initiative", "change": "modified", "name": "1f3afdf9-d0c9-4c3d-847f-89da613e70a8", "displayName": "Microsoft cloud security benchmark", "category": "Security Center", "fields": [ { "field": "version", "from": "57.59.0", "to": "57.60.0" }, { "field": "policyCount", "from": "224", "to": "216" } ] }, { "detectedAt": "2026-09-30T12:08:17.288Z", "kind": "initiative", "change": "modified", "name": "e3ec7e09-768c-4b64-882c-fcada3772047", "displayName": "Microsoft cloud security benchmark v2", "category": "Security Center", "fields": [ { "field": "version", "from": "1.7.0", "to": "1.8.0" }, { "field": "policyCount", "from": "727", "to": "718" } ] }, { "detectedAt": "2026-09-30T12:08:17.288Z", "kind": "initiative", "change": "modified", "name": "6ce73208-883e-490f-a2ac-44aac3b3687f", "displayName": "NL BIO Cloud Theme", "category": "Regulatory Compliance", "fields": [ { "field": "version", "from": "1.16.0", "to": "1.17.0" } ] }, { "detectedAt": "2026-09-25T11:26:00.355Z", "kind": "policy", "change": "added", "name": "7740c22b-07ef-4bac-9f5a-e38d188f80b7", "displayName": "[Preview]: Microsoft Foundry agents and toolboxes should not use denied tools", "category": "Cognitive Services" }, { "detectedAt": "2026-09-25T11:26:00.355Z", "kind": "policy", "change": "added", "name": "e7352ad2-6c86-4a07-9573-47f67b557ba8", "displayName": "[Preview]: Microsoft Foundry agents and toolboxes should only use approved tools", "category": "Cognitive Services" }, { "detectedAt": "2026-09-25T11:26:00.355Z", "kind": "policy", "change": "modified", "name": "993c2fcd-2b29-49d2-9eb0-df2c3a730c32", "displayName": "Azure Kubernetes Service Clusters should have local authentication methods disabled", "category": "Kubernetes", "fields": [ { "field": "version", "from": "1.0.1", "to": "2.0.0" } ] }, { "detectedAt": "2026-09-25T11:26:00.355Z", "kind": "policy", "change": "modified", "name": "040732e8-d947-40b8-95d6-854c95024bf8", "displayName": "Azure Kubernetes Service Private Clusters should be enabled", "category": "Kubernetes", "fields": [ { "field": "version", "from": "1.0.1", "to": "2.0.0" } ] }, { "detectedAt": "2026-09-25T11:26:00.355Z", "kind": "policy", "change": "modified", "name": "7d7be79c-23ba-4033-84dd-45e2a5ccdd67", "displayName": "Both operating systems and data disks in Azure Kubernetes Service clusters should be encrypted by customer-managed keys", "category": "Kubernetes", "fields": [ { "field": "version", "from": "1.0.1", "to": "2.0.0" } ] }, { "detectedAt": "2026-09-25T11:26:00.355Z", "kind": "policy", "change": "modified", "name": "57c2e3f0-98cf-4c3b-aa6b-e8f70726e74e", "displayName": "Configure supported Linux virtual machine scale sets to automatically install the Guest Attestation extension", "category": "Security Center", "fields": [ { "field": "displayName", "from": "[Preview]: Configure supported Linux virtual machine scale sets to automatically install the Guest Attestation extension", "to": "Configure supported Linux virtual machine scale sets to automatically install the Guest Attestation extension" }, { "field": "version", "from": "6.1.0-preview", "to": "6.2.0" } ] }, { "detectedAt": "2026-09-25T11:26:00.355Z", "kind": "policy", "change": "modified", "name": "95406fc3-1f69-47b0-8105-4c03b276ec5c", "displayName": "Configure supported Linux virtual machines to automatically enable Secure Boot", "category": "Security Center", "fields": [ { "field": "displayName", "from": "[Preview]: Configure supported Linux virtual machines to automatically enable Secure Boot", "to": "Configure supported Linux virtual machines to automatically enable Secure Boot" }, { "field": "version", "from": "5.0.0-preview", "to": "5.1.0" } ] }, { "detectedAt": "2026-09-25T11:26:00.355Z", "kind": "policy", "change": "modified", "name": "6074e9a3-c711-4856-976d-24d51f9e065b", "displayName": "Configure supported Linux virtual machines to automatically install the Guest Attestation extension", "category": "Security Center", "fields": [ { "field": "displayName", "from": "[Preview]: Configure supported Linux virtual machines to automatically install the Guest Attestation extension", "to": "Configure supported Linux virtual machines to automatically install the Guest Attestation extension" }, { "field": "version", "from": "7.1.0-preview", "to": "7.2.0" } ] }, { "detectedAt": "2026-09-25T11:26:00.355Z", "kind": "policy", "change": "modified", "name": "e494853f-93c3-4e44-9210-d12f61a64b34", "displayName": "Configure supported virtual machines to automatically enable vTPM", "category": "Security Center", "fields": [ { "field": "displayName", "from": "[Preview]: Configure supported virtual machines to automatically enable vTPM", "to": "Configure supported virtual machines to automatically enable vTPM" }, { "field": "version", "from": "2.0.0-preview", "to": "2.0.1" } ] }, { "detectedAt": "2026-09-25T11:26:00.355Z", "kind": "policy", "change": "modified", "name": "c9b2ae08-09e2-4f0e-bb43-b60bf0135bdf", "displayName": "Configure supported Windows virtual machine scale sets to automatically install the Guest Attestation extension", "category": "Security Center", "fields": [ { "field": "displayName", "from": "[Preview]: Configure supported Windows virtual machine scale sets to automatically install the Guest Attestation extension", "to": "Configure supported Windows virtual machine scale sets to automatically install the Guest Attestation extension" }, { "field": "version", "from": "4.1.0-preview", "to": "4.2.0" } ] }, { "detectedAt": "2026-09-25T11:26:00.355Z", "kind": "policy", "change": "modified", "name": "7cb1b219-61c6-47e0-b80c-4472cadeeb5f", "displayName": "Configure supported Windows virtual machines to automatically enable Secure Boot", "category": "Security Center", "fields": [ { "field": "displayName", "from": "[Preview]: Configure supported Windows virtual machines to automatically enable Secure Boot", "to": "Configure supported Windows virtual machines to automatically enable Secure Boot" }, { "field": "version", "from": "3.0.0-preview", "to": "3.0.1" } ] }, { "detectedAt": "2026-09-25T11:26:00.355Z", "kind": "policy", "change": "modified", "name": "98ea2fc7-6fc6-4fd1-9d8d-6331154da071", "displayName": "Configure supported Windows virtual machines to automatically install the Guest Attestation extension", "category": "Security Center", "fields": [ { "field": "displayName", "from": "[Preview]: Configure supported Windows virtual machines to automatically install the Guest Attestation extension", "to": "Configure supported Windows virtual machines to automatically install the Guest Attestation extension" }, { "field": "version", "from": "5.1.0-preview", "to": "5.2.0" } ] }, { "detectedAt": "2026-09-25T11:26:00.355Z", "kind": "policy", "change": "modified", "name": "496e010e-fa91-4c00-be4b-92b481f67b58", "displayName": "Configure VMs created with Shared Image Gallery images to install the Guest Attestation extension", "category": "Security Center", "fields": [ { "field": "displayName", "from": "[Preview]: Configure VMs created with Shared Image Gallery images to install the Guest Attestation extension", "to": "Configure VMs created with Shared Image Gallery images to install the Guest Attestation extension" }, { "field": "version", "from": "2.0.0-preview", "to": "2.1.0" } ] }, { "detectedAt": "2026-09-25T11:26:00.355Z", "kind": "policy", "change": "modified", "name": "009259b0-12e8-42c9-94e7-7af86aa58d13", "displayName": "Configure VMSS created with Shared Image Gallery images to install the Guest Attestation extension", "category": "Security Center", "fields": [ { "field": "displayName", "from": "[Preview]: Configure VMSS created with Shared Image Gallery images to install the Guest Attestation extension", "to": "Configure VMSS created with Shared Image Gallery images to install the Guest Attestation extension" }, { "field": "version", "from": "2.1.0-preview", "to": "2.2.0" } ] }, { "detectedAt": "2026-09-25T11:26:00.355Z", "kind": "policy", "change": "modified", "name": "a9b99dd8-06c5-4317-8629-9d86a3c6e7d9", "displayName": "Deploy network watcher when virtual networks are created", "category": "Network", "fields": [ { "field": "version", "from": "1.0.0", "to": "1.1.0" } ] }, { "detectedAt": "2026-09-25T11:26:00.355Z", "kind": "policy", "change": "modified", "name": "672fe5a1-2fcd-42d7-b85d-902b6e28c6ff", "displayName": "Guest Attestation extension should be installed on supported Linux virtual machines", "category": "Security Center", "fields": [ { "field": "displayName", "from": "[Preview]: Guest Attestation extension should be installed on supported Linux virtual machines", "to": "Guest Attestation extension should be installed on supported Linux virtual machines" }, { "field": "version", "from": "6.0.0-preview", "to": "6.1.0" } ] }, { "detectedAt": "2026-09-25T11:26:00.355Z", "kind": "policy", "change": "modified", "name": "a21f8c92-9e22-4f09-b759-50500d1d2dda", "displayName": "Guest Attestation extension should be installed on supported Linux virtual machines scale sets", "category": "Security Center", "fields": [ { "field": "displayName", "from": "[Preview]: Guest Attestation extension should be installed on supported Linux virtual machines scale sets", "to": "Guest Attestation extension should be installed on supported Linux virtual machines scale sets" }, { "field": "version", "from": "5.1.0-preview", "to": "5.2.0" } ] }, { "detectedAt": "2026-09-25T11:26:00.355Z", "kind": "policy", "change": "modified", "name": "1cb4d9c2-f88f-4069-bee0-dba239a57b09", "displayName": "Guest Attestation extension should be installed on supported Windows virtual machines", "category": "Security Center", "fields": [ { "field": "displayName", "from": "[Preview]: Guest Attestation extension should be installed on supported Windows virtual machines", "to": "Guest Attestation extension should be installed on supported Windows virtual machines" }, { "field": "version", "from": "4.0.0-preview", "to": "4.0.1" } ] }, { "detectedAt": "2026-09-25T11:26:00.355Z", "kind": "policy", "change": "modified", "name": "f655e522-adff-494d-95c2-52d4f6d56a42", "displayName": "Guest Attestation extension should be installed on supported Windows virtual machines scale sets", "category": "Security Center", "fields": [ { "field": "displayName", "from": "[Preview]: Guest Attestation extension should be installed on supported Windows virtual machines scale sets", "to": "Guest Attestation extension should be installed on supported Windows virtual machines scale sets" }, { "field": "version", "from": "3.1.0-preview", "to": "3.1.1" } ] }, { "detectedAt": "2026-09-25T11:26:00.355Z", "kind": "policy", "change": "modified", "name": "b1bb3592-47b8-4150-8db0-bfdcc2c8965b", "displayName": "Linux virtual machines should use Secure Boot", "category": "Security Center", "fields": [ { "field": "displayName", "from": "[Preview]: Linux virtual machines should use Secure Boot", "to": "Linux virtual machines should use Secure Boot" }, { "field": "version", "from": "1.0.0-preview", "to": "1.0.1" } ] }, { "detectedAt": "2026-09-25T11:26:00.355Z", "kind": "policy", "change": "modified", "name": "97566dd7-78ae-4997-8b36-1c7bfe0d8121", "displayName": "Secure Boot should be enabled on supported Windows virtual machines", "category": "Security Center", "fields": [ { "field": "displayName", "from": "[Preview]: Secure Boot should be enabled on supported Windows virtual machines", "to": "Secure Boot should be enabled on supported Windows virtual machines" }, { "field": "version", "from": "4.0.0-preview", "to": "4.0.1" } ] }, { "detectedAt": "2026-09-25T11:26:00.355Z", "kind": "policy", "change": "modified", "name": "41425d9f-d1a5-499a-9932-f8ed8453932c", "displayName": "Temp disks and cache for agent node pools in Azure Kubernetes Service clusters should be encrypted at host", "category": "Kubernetes", "fields": [ { "field": "version", "from": "1.0.1", "to": "2.0.0" } ] }, { "detectedAt": "2026-09-25T11:26:00.355Z", "kind": "policy", "change": "modified", "name": "1c30f9cd-b84c-49cc-aa2c-9288447cc3b3", "displayName": "vTPM should be enabled on supported virtual machines", "category": "Security Center", "fields": [ { "field": "displayName", "from": "[Preview]: vTPM should be enabled on supported virtual machines", "to": "vTPM should be enabled on supported virtual machines" }, { "field": "version", "from": "2.0.0-preview", "to": "2.0.1" } ] }, { "detectedAt": "2026-09-11T10:50:58.673Z", "kind": "policy", "change": "modified", "name": "17b3de92-f710-4cf4-aa55-0e7859f1ed7b", "displayName": "[Preview]: Configure system-assigned managed identity to enable Azure Monitor assignments on VMs", "category": "Monitoring", "fields": [ { "field": "version", "from": "6.5.0-preview", "to": "6.7.0-preview" } ] }, { "detectedAt": "2026-09-11T10:50:58.673Z", "kind": "policy", "change": "modified", "name": "a83269e2-b4f7-4a3f-b5ed-897c787cbc7c", "displayName": "App network configuration should deny link to external private endpoints", "category": "Mission", "fields": [ { "field": "mode", "from": "Indexed", "to": "All" }, { "field": "version", "from": "1.0.0", "to": "1.1.0" } ] }, { "detectedAt": "2026-09-11T10:50:58.673Z", "kind": "policy", "change": "modified", "name": "b546c248-6dee-41e6-82f7-978634aeb73d", "displayName": "App Service app configs should restrict default network access in Mission Platform products and services", "category": "Mission", "fields": [ { "field": "mode", "from": "Indexed", "to": "All" }, { "field": "version", "from": "1.0.0", "to": "1.1.0" } ] }, { "detectedAt": "2026-09-11T10:50:58.673Z", "kind": "policy", "change": "modified", "name": "21c2b371-0891-40a0-82e6-629defc1f36a", "displayName": "App Service app slot configs should restrict default network access in Mission Platform products and services", "category": "Mission", "fields": [ { "field": "mode", "from": "Indexed", "to": "All" }, { "field": "version", "from": "1.0.0", "to": "1.1.0" } ] }, { "detectedAt": "2026-09-11T10:50:58.673Z", "kind": "policy", "change": "added", "name": "0ecbe514-db62-4284-992e-6dc3cde83d2b", "displayName": "Azure Event Hub namespaces should be running TLS version 1.2 or newer", "category": "Network" }, { "detectedAt": "2026-09-11T10:50:58.673Z", "kind": "policy", "change": "modified", "name": "050a90d5-7cce-483f-8f6c-0df462036dda", "displayName": "Configure Linux Virtual Machine Scale Sets to be associated with a Data Collection Rule or a Data Collection Endpoint", "category": "Monitoring", "fields": [ { "field": "version", "from": "4.11.0", "to": "4.13.0" } ] }, { "detectedAt": "2026-09-11T10:50:58.673Z", "kind": "policy", "change": "modified", "name": "a4034bc6-ae50-406d-bf76-50f4ee5a7811", "displayName": "Configure Linux virtual machines to run Azure Monitor Agent with system-assigned managed identity-based authentication", "category": "Monitoring", "fields": [ { "field": "version", "from": "3.14.0", "to": "3.16.0" } ] }, { "detectedAt": "2026-09-11T10:50:58.673Z", "kind": "policy", "change": "modified", "name": "ae8a10e6-19d6-44a3-a02d-a2bdfc707742", "displayName": "Configure Linux virtual machines to run Azure Monitor Agent with user-assigned managed identity-based authentication", "category": "Monitoring", "fields": [ { "field": "version", "from": "3.18.0", "to": "3.20.0" } ] }, { "detectedAt": "2026-09-11T10:50:58.673Z", "kind": "policy", "change": "modified", "name": "1afdc4b6-581a-45fb-b630-f1e6051e3e7a", "displayName": "Linux virtual machines should have Azure Monitor Agent installed", "category": "Monitoring", "fields": [ { "field": "version", "from": "3.10.0", "to": "3.12.0" } ] }, { "detectedAt": "2026-09-11T10:50:58.673Z", "kind": "policy", "change": "modified", "name": "f9fd212a-5a3c-4754-a9af-560ec3b1ae13", "displayName": "Restrict Slot Configuration Access Rules", "category": "Mission", "fields": [ { "field": "mode", "from": "Indexed", "to": "All" }, { "field": "version", "from": "1.0.0", "to": "1.1.0" } ] }, { "detectedAt": "2026-09-11T10:50:58.673Z", "kind": "policy", "change": "modified", "name": "2a1a9cdf-e04d-429a-8416-3bfb72a1b26f", "displayName": "Storage accounts should restrict network access using virtual network rules", "category": "Storage", "fields": [ { "field": "version", "from": "1.0.1", "to": "1.1.0" } ] }, { "detectedAt": "2026-09-10T15:41:06.184Z", "kind": "policy", "change": "added", "name": "6313cbe8-6fb7-451b-a9e3-3f23b59843ca", "displayName": "Azure Application Gateway should be running TLS version 1.2 or newer", "category": "Network" }, { "detectedAt": "2026-09-10T15:41:06.184Z", "kind": "policy", "change": "added", "name": "403594a1-5989-4edd-8ea3-cac19a8cc43a", "displayName": "Azure Service Bus namespaces should be running TLS version 1.2 or newer", "category": "Network" }, { "detectedAt": "2026-09-10T15:41:06.184Z", "kind": "policy", "change": "modified", "name": "2ea82cdd-f2e8-4500-af75-67a2e084ca74", "displayName": "Configure Linux Machines to be associated with a Data Collection Rule or a Data Collection Endpoint", "category": "Monitoring", "fields": [ { "field": "version", "from": "6.12.0", "to": "6.14.0" } ] }, { "detectedAt": "2026-09-10T15:41:06.184Z", "kind": "policy", "change": "modified", "name": "56a3e4f8-649b-4fac-887e-5564d11e8d3a", "displayName": "Configure Linux virtual machine scale sets to run Azure Monitor Agent with system-assigned managed identity-based authentication", "category": "Monitoring", "fields": [ { "field": "version", "from": "3.14.0", "to": "3.16.0" } ] }, { "detectedAt": "2026-09-10T15:41:06.184Z", "kind": "policy", "change": "modified", "name": "59c3d93f-900b-4827-a8bd-562e7b956e7c", "displayName": "Configure Linux virtual machine scale sets to run Azure Monitor Agent with user-assigned managed identity-based authentication", "category": "Monitoring", "fields": [ { "field": "version", "from": "3.15.0", "to": "3.17.0" } ] }, { "detectedAt": "2026-09-10T15:41:06.184Z", "kind": "policy", "change": "modified", "name": "58e891b9-ce13-4ac3-86e4-ac3e1f20cb07", "displayName": "Configure Linux Virtual Machines to be associated with a Data Collection Rule or a Data Collection Endpoint", "category": "Monitoring", "fields": [ { "field": "version", "from": "4.11.0", "to": "4.13.0" } ] }, { "detectedAt": "2026-09-10T15:41:06.184Z", "kind": "policy", "change": "modified", "name": "e87a87f5-e6dd-4919-be21-abb0a4ea4630", "displayName": "Configure Marketplace Network Virtual Appliances (NVAs) to add a MANA support tag", "category": "Compute", "fields": [ { "field": "version", "from": "1.3.0", "to": "1.4.0" } ] }, { "detectedAt": "2026-09-10T15:41:06.184Z", "kind": "policy", "change": "modified", "name": "696cb1d3-2dcf-4b44-aa7a-caccd18b1b96", "displayName": "Container Registry should restrict external private endpoints.", "category": "Mission", "fields": [ { "field": "mode", "from": "Indexed", "to": "All" }, { "field": "version", "from": "1.0.0", "to": "1.1.0" } ] }, { "detectedAt": "2026-09-10T15:41:06.184Z", "kind": "policy", "change": "modified", "name": "ea79b84d-f538-475d-a6ef-7951747a3455", "displayName": "CosmosDB should restrict external private endpoints access", "category": "Mission", "fields": [ { "field": "mode", "from": "Indexed", "to": "All" }, { "field": "version", "from": "1.0.0", "to": "1.1.0" } ] }, { "detectedAt": "2026-09-10T15:41:06.184Z", "kind": "policy", "change": "modified", "name": "32ade945-311e-4249-b8a4-a549924234d7", "displayName": "Linux virtual machine scale sets should have Azure Monitor Agent installed", "category": "Monitoring", "fields": [ { "field": "version", "from": "3.10.0", "to": "3.12.0" } ] }, { "detectedAt": "2026-09-10T15:41:06.184Z", "kind": "policy", "change": "modified", "name": "32a7ec27-785d-4efb-98bd-9a0fffc7777c", "displayName": "Restrict Site Configuration Access Rules", "category": "Mission", "fields": [ { "field": "mode", "from": "Indexed", "to": "All" }, { "field": "version", "from": "1.0.0", "to": "1.1.0" } ] }, { "detectedAt": "2026-09-10T15:41:06.184Z", "kind": "policy", "change": "modified", "name": "ead83ca5-588e-4a27-9d7c-f4df41484dd4", "displayName": "Storage Account should restrict external private endpoints linking to this tenant.", "category": "Mission", "fields": [ { "field": "mode", "from": "Indexed", "to": "All" }, { "field": "version", "from": "1.0.0", "to": "1.1.0" } ] }, { "detectedAt": "2026-09-10T15:41:06.184Z", "kind": "policy", "change": "modified", "name": "4733ea7b-a883-42fe-8cac-97454c2a9e4a", "displayName": "Storage accounts should have infrastructure encryption", "category": "Storage", "fields": [ { "field": "version", "from": "1.0.0", "to": "1.1.0" } ] }, { "detectedAt": "2026-09-10T15:41:06.184Z", "kind": "policy", "change": "modified", "name": "8c6a50c6-9ffd-4ae7-986f-5fa6111f9a54", "displayName": "Storage accounts should prevent shared key access", "category": "Storage", "fields": [ { "field": "version", "from": "2.0.0", "to": "2.1.0" } ] }, { "detectedAt": "2026-09-10T15:41:06.184Z", "kind": "policy", "change": "modified", "name": "34c877ad-507e-4c82-993e-3452a6e0ad3c", "displayName": "Storage accounts should restrict network access", "category": "Storage", "fields": [ { "field": "version", "from": "1.1.1", "to": "1.2.0" } ] }, { "detectedAt": "2026-09-10T15:41:06.184Z", "kind": "policy", "change": "modified", "name": "6fac406b-40ca-413b-bf8e-0bf964659c25", "displayName": "Storage accounts should use customer-managed key for encryption", "category": "Storage", "fields": [ { "field": "version", "from": "1.0.3", "to": "1.1.0" } ] }, { "detectedAt": "2026-09-10T15:41:06.184Z", "kind": "policy", "change": "modified", "name": "6edd7eda-6dd8-40f7-810d-67160c639cd9", "displayName": "Storage accounts should use private link", "category": "Storage", "fields": [ { "field": "version", "from": "2.0.0", "to": "2.1.0" } ] }, { "detectedAt": "2026-09-09T10:56:54.696Z", "kind": "initiative", "change": "modified", "name": "c4a70814-96be-461c-889f-2b27429120dc", "displayName": "Enable ChangeTracking and Inventory for virtual machine scale sets", "category": "ChangeTrackingAndInventory", "fields": [ { "field": "version", "from": "1.1.1", "to": "1.2.0" } ] }, { "detectedAt": "2026-09-09T10:56:54.696Z", "kind": "initiative", "change": "modified", "name": "92a36f05-ebc9-4bba-9128-b47ad2ea3354", "displayName": "Enable ChangeTracking and Inventory for virtual machines", "category": "ChangeTrackingAndInventory", "fields": [ { "field": "version", "from": "1.2.0", "to": "1.3.0" } ] } ] }