v5.3.6

Bug fix when a management group has no children. See #87

v5.3.5: multiple big fixes

What's Changed

• Added DDOS policy to Landing zones by @anwather in #68
• Updated role name by @jeremiahhoward in #72
• Updated policy initiative by @anwather in #74
• Enhance operational scripts by @nicko3185 in #76
• Enhancements to New-AzPolicyReaderRole script. by @haflidif in #78

New Contributors

• @jeremiahhoward made their first contribution in #72
• @haflidif made their first contribution in #78

Full Changelog: v5.3.4...v5.3.5

v5.3.4: Merge pull request #67 from Azure/bug/roleplancount

Fixed role plan change count

Parameter single element array type bug fix

Bug fix dealing with mishandling of an array with one element. This is caused by PowerShell's array unwinding on return.

Regression bug fix in Create-AzRemediationTasks.ps1.

Bug introduced in v5.1: Create-AzRemediationTasks.ps1 did not create remediation tasks.

v5.3.1

What's Changed

Policy autodoc feature refinement by @techlake in #62

• Improved the documentation output format
• Documented the improved feature as promised in v5.3
• v5.3 included breaking changes in auto-documentation definition/output. Please read the warning in Definitions/Documentation/README.md for details

Full Changelog: v5.3...v5.3.1

v5.3: Merge pull request #61 from Azure/feature/heinrich/autodoc

• New auto-doc enhancements (may be breaking for some documentation changes
• Bug fix for assignment parameter handling
• Known issue, documentation does not yet reflect new feature -> I will fix that next week.

v5.2

What's Changed

• New feature definitionEntryList by @techlake in #56
• Change is non-breaking since definitionEntry in assignments is still valid.
• Some bug fixes (minor)

v5.1

What's Changed

Exemptions managed with EPAC by @techlake in #54

• Get-AzExemptions.ps1.
• Define Exemptions in Definitions/Exemptions.
• Define as Json or CSV.
• Optional XLSX though a third-party PowerShell gallery module.

Bug Fixes and Minor Improvements

• Fix bug with suppressDeletes switch.
• Renamed Definitions/DocumentationSpec to Definitions/Documentation. Script will check old path if new path doesn't exist to avoid breaking changes.
• Improved documentation generation.

Simplified global-settings.jsonc, improved documentation scripts and multi-tenant handling

• Simplified global-setting.jsonc: breaking changes
  • Simplified the layout by removing the documentation specifications (representativeAssignments and initiativeSetsToCompare) from global-settings.jsonc and moving to a folder (see below)
  • Changed managedIdentityLocation to managedIdentityLocations (plural)
• Improved and consolidated automated generation of documentation
  • Folder Definitions/DocumentationSpecs conatains the instructions on what to generate (moved with substantial format chnages from global-settings.jsonc
  • Single script to generate documentation: Scripts\Operations\Build-PolicyAssignmentDocumentation.ps1
  • Removed scripts Get-AzEffectsForEnvironments.ps1 and Get-AzEffectsForInitiative.ps1, replaced by Build-PolicyAssignmentDocumentation.ps1
• Improved multi-tenant and cloud selection support, prompts for re-authentication in interactive mode
  • Detects when wrong cloud selected (additional field in pacEnvironments (global-settings.jsonc)
  • Detects when logged into wrong tenant
  • Detects when default subscription wrong (switches to correct one)
• Bug fixes
  • Solution had latent scope bug retrieving Policy and Initiative definitions from management Groups, if the default subscription was not in the right hierarchy.
  • Improved error handling