Azure Policy: diagnose an expired exemption before disabling the assignment
A production runbook for tying expiry, scope, assignment and compliance together before renewing an Azure Policy exemption or disabling the guardrail.
Read article
Tag
azure-policy
6 articles connected to this technical signal.
Azure Resource Locks: diagnose a blocked deployment before removing the lock
A production runbook for separating inherited Azure management locks, RBAC, Policy and deny assignments, then validating a bounded unlock, deployment and rollback.
Read articleAzure Policy: bound a remediation task before it rewrites production
A production runbook for validating the target set, identity, roles, canary, logs and rollback of an Azure Policy remediation before scaling it out.
Read articleAzure Policy: diagnose a deny before creating a production exemption
A production runbook for qualifying an Azure Policy deployment deny with assignment, initiative, deny effect, compliance, scoped exemption, validation and rollback.
Read articleAzure IaC: validate an infrastructure plan before production apply
A production runbook for qualifying a Terraform, Bicep or ARM plan before apply with drift, CI identity, Azure Policy, destructive changes, validation and rollback.
Read articleAzure Policy remediation: fix drift without breaking production
A production runbook for running Azure Policy remediation with impact preview, managed identity checks, controlled batches, exemptions, logs and rollback.
Read article