mcpField
A
azure-policy

azure-policy

github.com/microsoftdocs云与 DevOps796221 次安装3 天前更新
代码仓库

关于 azure-policy

azure-policy 为使用 Azure Policy 的 Agent 提供参考指导，涵盖配置、故障排查、安全与部署。它结合本地速查内容和远程文档获取能力。

主要功能

  1. 01Azure Policy 故障排查
  2. 02安全与合规指导
  3. 03策略即代码架构
  4. 04配置和部署参考
  5. 05本地速查与远程文档

适用场景

  1. 01诊断策略不合规和错误
  2. 02规划安全基线与合规控制
  3. 03设计策略即代码和 CI/CD 工作流
  4. 04部署 Machine Configuration 包

MCP 相关

可优先通过 mcp_microsoftdocs 的 microsoft_docs_fetch 获取文档，也可使用 fetch_webpage 作为备用；需要网络访问。

安装

复制下面的命令，在终端中运行。

$npx skills add https://github.com/microsoftdocs/agent-skills --skill azure-policy

安装后在 Claude Code 中输入/azure-policy确认已加载。

详细介绍

Azure Policy 技能

此技能提供 Azure Policy 方面的专家指导，涵盖故障排除、最佳实践、决策、架构与设计模式、安全性、配置、集成与编码模式，以及部署。它结合了本地快速参考内容与远程文档获取功能。

如何使用此技能

面向 Agent 的重要提示：使用下方的类别索引查找相关部分。对于标有行范围的类别（例如 L35-L120），使用 read_file 读取指定行。对于带有文件链接的类别（例如 [security.md](security.md)），使用 read_file 读取链接所指向的参考文件。

面向 Agent 的重要提示：如果 metadata.generated_at 超过 3 个月，请建议用户从存储库拉取最新版本。如果 mcp_microsoftdocs 工具不可用，请建议用户安装该工具：安装指南

此技能需要网络访问权限才能获取文档内容：

  • 首选：使用 mcp_microsoftdocs:microsoft_docs_fetch，并将查询字符串设为 from=learn-agent-skill。返回 Markdown。
  • 备用：使用 fetch_webpage，并将查询字符串设为 from=learn-agent-skill&accept=text/markdown。返回 Markdown。

类别索引

类别行说明
故障排除L36-L44诊断和修复 Azure Policy 不合规及常见错误，以及排查 Azure Machine Configuration 部署和 Linux/Windows 来宾配置 Agent 的问题。
最佳实践L45-L52安全测试和部署 Azure Policy 与 Machine/Guest Configuration 的最佳实践，包括 PSDSC 行为变更、影响评估和安全推出策略。
决策L53-L60关于规划从 DSC/Automanage 迁移到 Machine Configuration/Azure Policy，以及选择用于管理和保护 VM 的推荐策略定义的指南。
架构与设计模式L61-L65设计 Azure Policy-as-Code 工作流，与 CI/CD、GitOps 和审批流程集成，并组织策略存储库、环境和自动化，以实现可扩展的治理。
安全性L66-L170使用 Azure Policy 实现安全与合规：部署安全基线、映射到标准（CIS、NIST、ISO、PCI、FedRAMP 等），并强制执行法规和 MFA 要求。
配置L171-L210设计、分配和管理 Azure Policy 与 Machine Configuration：JSON 结构、效果、来宾配置包、合规性数据、修正、标记、身份和豁免。
集成与编码模式L211-L240编写可重用 Azure Policy 定义（运算符、字段、效果、标记、计划）的模式，以及通过 Terraform、Kubernetes/Gatekeeper、VS Code、Event Grid 和 Resource Graph 集成或自动化的模式。
部署L241-L251如何通过 ARM/Bicep/Terraform/REST 部署和分配 Machine Configuration 包、将其发布到存储、导出策略以实现 policy-as-code，以及在 DevOps 管道中强制执行 Azure Policy。
故障排除
主题URL
排查 Azure Machine Configuration 部署问题https://learn.microsoft.com/en-us/azure/governance/machine-configuration/overview/04-operations-troubleshooting
排查 Azure Machine Configuration Linux Agent 问题https://learn.microsoft.com/en-us/azure/governance/machine-configuration/whats-new/agent/linux
诊断并解决 Azure Machine Configuration Windows Agent 问题https://learn.microsoft.com/en-us/azure/governance/machine-configuration/whats-new/agent/windows
诊断 Azure Policy 不合规的原因https://learn.microsoft.com/en-us/azure/governance/policy/how-to/determine-non-compliance
排查常见 Azure Policy 错误和 SDK 问题https://learn.microsoft.com/en-us/azure/governance/policy/troubleshoot/general
最佳实践
主题URL
使用 GuestConfiguration 工具测试 Machine Configuration 包https://learn.microsoft.com/en-us/azure/governance/machine-configuration/how-to/develop-custom-package/3-test-package
了解 Machine Configuration 中 PSDSC 的行为变更https://learn.microsoft.com/en-us/azure/governance/machine-configuration/whats-new/psdsc-in-machine-configuration
在部署新的 Azure 策略前评估影响https://learn.microsoft.com/en-us/azure/governance/policy/concepts/evaluate-impact
在 Azure Policy 中应用安全部署实践https://learn.microsoft.com/en-us/azure/governance/policy/how-to/policy-safe-deployment-practices
决策制定
主题URL
规划从 Azure Automation DSC 迁移到 Machine Configurationhttps://learn.microsoft.com/en-us/azure/governance/machine-configuration/whats-new/migrating-from-azure-automation
规划从 DSC 扩展迁移到 Machine Configurationhttps://learn.microsoft.com/en-us/azure/governance/machine-configuration/whats-new/migrating-from-dsc-extension
为 VM 选择推荐的 Azure Policy 定义https://learn.microsoft.com/en-us/azure/governance/policy/concepts/recommended-policies
规划从 Automanage 最佳实践迁移到 Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/how-to/migrate-from-automanage-best-practices
架构与设计模式
主题URL
设计 Azure Policy 即代码治理工作流https://learn.microsoft.com/en-us/azure/governance/policy/concepts/policy-as-code
安全
主题URL
部署 Machine Configuration 安全基线策略https://learn.microsoft.com/en-us/azure/governance/machine-configuration/how-to/assign-security-baselines/deploy-a-baseline-policy-assignment
自定义 Machine Configuration 安全基线参数https://learn.microsoft.com/en-us/azure/governance/machine-configuration/how-to/assign-security-baselines/specify-custom-parameters-for-baseline-policy
为 Machine Configuration 基线编写 JSON 参数https://learn.microsoft.com/en-us/azure/governance/machine-configuration/how-to/assign-security-baselines/understand-baseline-settings-parameter
为 Machine Configuration 包签名并强制执行已签名内容https://learn.microsoft.com/en-us/azure/governance/machine-configuration/how-to/develop-custom-package/6-sign-package
在 Azure Policy 中使用法规合规计划https://learn.microsoft.com/en-us/azure/governance/policy/concepts/regulatory-compliance
将澳大利亚 ISM PROTECTED 控件映射到 Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/australia-ism
将澳大利亚 ISM PROTECTED 控件映射到 Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/australia-ism
通过 Policy 实施 Microsoft 云安全基准https://learn.microsoft.com/en-us/azure/governance/policy/samples/azure-security-benchmark
通过 Policy 实施 Microsoft 云安全基准https://learn.microsoft.com/en-us/azure/governance/policy/samples/azure-security-benchmark
将 Azure Policy 映射到加拿大联邦 PBMMhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/canada-federal-pbmm
将 Azure Policy 映射到加拿大联邦 PBMMhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/canada-federal-pbmm
CIS Azure 1.1.0 的 Azure Policy 映射https://learn.microsoft.com/en-us/azure/governance/policy/samples/cis-azure-1-1-0
CIS Azure 1.1.0 的 Azure Policy 映射https://learn.microsoft.com/en-us/azure/governance/policy/samples/cis-azure-1-1-0
使 CIS Azure 1.3.0 控件与 Azure Policy 保持一致https://learn.microsoft.com/en-us/azure/governance/policy/samples/cis-azure-1-3-0
使 CIS Azure 1.3.0 控件与 Azure Policy 保持一致https://learn.microsoft.com/en-us/azure/governance/policy/samples/cis-azure-1-3-0
使 CIS Azure 1.4.0 控件与 Azure Policy 保持一致https://learn.microsoft.com/en-us/azure/governance/policy/samples/cis-azure-1-4-0
使 CIS Azure 1.4.0 控件与 Azure Policy 保持一致https://learn.microsoft.com/en-us/azure/governance/policy/samples/cis-azure-1-4-0
使 CIS Azure 2.0.0 控件与 Azure Policy 保持一致https://learn.microsoft.com/en-us/azure/governance/policy/samples/cis-azure-2-0-0
使 CIS Azure 2.0.0 控件与 Azure Policy 保持一致https://learn.microsoft.com/en-us/azure/governance/policy/samples/cis-azure-2-0-0
通过 Azure Policy 在 AlmaLinux 上强制实施 CIS 基准https://learn.microsoft.com/en-us/azure/governance/policy/samples/cis-linux/alma-ado
将 CIS 基准应用于 AKS Optimized Azure Linuxhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/cis-linux/azure-linux-ado
通过 Azure Policy 为 Debian 配置 CIS 基准https://learn.microsoft.com/en-us/azure/governance/policy/samples/cis-linux/debian-ado
通过 Policy 在 Oracle Linux 上强制实施 CIS 基准https://learn.microsoft.com/en-us/azure/governance/policy/samples/cis-linux/oracle-ado
通过 Machine Configuration 将 CIS 基准应用于 RHELhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/cis-linux/rhel-ado
在 Azure 中为 Rocky Linux 配置 CIS 基准https://learn.microsoft.com/en-us/azure/governance/policy/samples/cis-linux/rocky-ado
将 CIS 基准应用于 SUSE Linux Enterprisehttps://learn.microsoft.com/en-us/azure/governance/policy/samples/cis-linux/suse-ado
通过 Azure Policy 在 Ubuntu 上强制实施 CIS 基准https://learn.microsoft.com/en-us/azure/governance/policy/samples/cis-linux/ubuntu-ado
将 CMMC Level 3 控件映射到 Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/cmmc-l3
将 CMMC Level 3 控件映射到 Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/cmmc-l3
将 FedRAMP High 控件映射到 Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/fedramp-high
将 FedRAMP High 控件映射到 Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/fedramp-high
将 FedRAMP Moderate 控件映射到 Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/fedramp-moderate
将 FedRAMP Moderate 控件映射到 Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/fedramp-moderate
通过 Azure Policy 实施 Gov 云安全基准https://learn.microsoft.com/en-us/azure/governance/policy/samples/gov-azure-security-benchmark
通过 Azure Policy 实施 Gov 云安全基准https://learn.microsoft.com/en-us/azure/governance/policy/samples/gov-azure-security-benchmark
通过 Azure Policy 使用 CIS Azure 1.1.0 基准https://learn.microsoft.com/en-us/azure/governance/policy/samples/gov-cis-azure-1-1-0
通过 Azure Policy 使用 CIS Azure 1.1.0 基准https://learn.microsoft.com/en-us/azure/governance/policy/samples/gov-cis-azure-1-1-0
使 CIS Azure 1.3.0 (Gov) 控件与 Azure Policy 保持一致https://learn.microsoft.com/en-us/azure/governance/policy/samples/gov-cis-azure-1-3-0
使 CIS Azure 1.3.0 (Gov) 控件与 Azure Policy 保持一致https://learn.microsoft.com/en-us/azure/governance/policy/samples/gov-cis-azure-1-3-0
将 CMMC Level 3 (Gov) 控件映射到 Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/gov-cmmc-l3
将 CMMC Level 3 (Gov) 控件映射到 Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/gov-cmmc-l3
将 FedRAMP High (Gov) 控件映射到 Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/gov-fedramp-high
将 FedRAMP High (Gov) 控件映射到 Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/gov-fedramp-high
将 FedRAMP Moderate (Gov) 控件映射到 Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/gov-fedramp-moderate
将 FedRAMP Moderate (Gov) 控件映射到 Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/gov-fedramp-moderate
使用 Azure Policy 实施 IRS 1075 控件https://learn.microsoft.com/en-us/azure/governance/policy/samples/gov-irs-1075-sept2016
使用 Azure Policy 实施 IRS 1075 控件https://learn.microsoft.com/en-us/azure/governance/policy/samples/gov-irs-1075-sept2016
将 ISO 27001:2013 控件映射到 Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/gov-iso-27001
将 ISO 27001:2013 控件映射到 Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/gov-iso-27001
使 NIST SP 800-171 R2 控件与 Azure Government 中的 Azure Policy 保持一致https://learn.microsoft.com/en-us/azure/governance/policy/samples/gov-nist-sp-800-171-r2
使 NIST SP 800-171 R2 控件与 Azure Government 中的 Azure Policy 保持一致https://learn.microsoft.com/en-us/azure/governance/policy/samples/gov-nist-sp-800-171-r2
将 NIST SP 800-53 R4 控件映射到 Azure Government 中的 Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/gov-nist-sp-800-53-r4
将 NIST SP 800-53 R4 控件映射到 Azure Government 中的 Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/gov-nist-sp-800-53-r4
使用 Azure Policy 在 Azure Government 中满足 NIST SP 800-53 R5 要求https://learn.microsoft.com/en-us/azure/governance/policy/samples/gov-nist-sp-800-53-r5
使用 Azure Policy 在 Azure Government 中满足 NIST SP 800-53 R5 要求https://learn.microsoft.com/en-us/azure/governance/policy/samples/gov-nist-sp-800-53-r5
将 SOC 2 控件映射到 Azure Government 中的 Azure Policy 计划https://learn.microsoft.com/en-us/azure/governance/policy/samples/gov-soc-2
将 SOC 2 控件映射到 Azure Government 中的 Azure Policy 计划https://learn.microsoft.com/en-us/azure/governance/policy/samples/gov-soc-2
通过 Azure Policy 应用 CIS Linux 安全基线https://learn.microsoft.com/en-us/azure/governance/policy/samples/guest-configuration-baseline-cis-linux
通过 Azure Policy 来宾配置使用 Docker 安全基线https://learn.microsoft.com/en-us/azure/governance/policy/samples/guest-configuration-baseline-docker
通过 Azure Policy 来宾配置使用 Linux 安全基线https://learn.microsoft.com/en-us/azure/governance/policy/samples/guest-configuration-baseline-linux
通过来宾配置应用 Windows Server 安全基线https://learn.microsoft.com/en-us/azure/governance/policy/samples/guest-configuration-baseline-windows
通过来宾配置应用 Windows Server 2025 安全基线https://learn.microsoft.com/en-us/azure/governance/policy/samples/guest-configuration-baseline-windows-server-2025
将 HIPAA HITRUST 控件映射到 Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/hipaa-hitrust
将 HIPAA HITRUST 控件映射到 Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/hipaa-hitrust
IRS 1075 (2016) 的 Azure Policy 映射https://learn.microsoft.com/en-us/azure/governance/policy/samples/irs-1075-sept2016
IRS 1075 (2016) 的 Azure Policy 映射https://learn.microsoft.com/en-us/azure/governance/policy/samples/irs-1075-sept2016
ISO 27001:2013 的 Azure Policy 映射https://learn.microsoft.com/en-us/azure/governance/policy/samples/iso-27001
ISO 27001:2013 的 Azure Policy 映射https://learn.microsoft.com/en-us/azure/governance/policy/samples/iso-27001
通过 Azure Policy 应用 Sovereignty Baseline Confidential 策略https://learn.microsoft.com/en-us/azure/governance/policy/samples/mcfs-baseline-confidential
通过 Azure Policy 应用 Sovereignty Baseline Confidential 策略https://learn.microsoft.com/en-us/azure/governance/policy/samples/mcfs-baseline-confidential
Sovereignty Baseline Global 的 Policy 映射https://learn.microsoft.com/en-us/azure/governance/policy/samples/mcfs-baseline-global
Sovereignty Baseline Global 的 Policy 映射https://learn.microsoft.com/en-us/azure/governance/policy/samples/mcfs-baseline-global
将 NIST SP 800-171 R2 控件映射到 Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/nist-sp-800-171-r2
将 NIST SP 800-171 R2 控件映射到 Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/nist-sp-800-171-r2
将 NIST SP 800-53 Rev. 4 控件映射到 Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/nist-sp-800-53-r4
将 NIST SP 800-53 Rev. 4 控件映射到 Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/nist-sp-800-53-r4
将 NIST SP 800-53 Rev. 5 控件映射到 Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/nist-sp-800-53-r5
将 NIST SP 800-53 Rev. 5 控件映射到 Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/nist-sp-800-53-r5
将 NL BIO Cloud Theme 控件映射到 Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/nl-bio-cloud-theme
将 NL BIO Cloud Theme 控件映射到 Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/nl-bio-cloud-theme
PCI DSS 3.2.1 的 Azure Policy 映射https://learn.microsoft.com/en-us/azure/governance/policy/samples/pci-dss-3-2-1
PCI DSS 3.2.1 的 Azure Policy 映射https://learn.microsoft.com/en-us/azure/governance/policy/samples/pci-dss-3-2-1
PCI DSS v4.0 的 Azure Policy 映射https://learn.microsoft.com/en-us/azure/governance/policy/samples/pci-dss-4-0
PCI DSS v4.0 的 Azure Policy 映射https://learn.microsoft.com/en-us/azure/governance/policy/samples/pci-dss-4-0
使 RBI 银行业 IT 框架与 Azure Policy 保持一致https://learn.microsoft.com/en-us/azure/governance/policy/samples/rbi-itf-banks-2016
使 RBI 银行业 IT 框架与 Azure Policy 保持一致https://learn.microsoft.com/en-us/azure/governance/policy/samples/rbi-itf-banks-2016
使 RBI NBFC IT 框架与 Azure Policy 保持一致https://learn.microsoft.com/en-us/azure/governance/policy/samples/rbi-itf-nbfc-2017
使 RBI NBFC IT 框架与 Azure Policy 保持一致https://learn.microsoft.com/en-us/azure/governance/policy/samples/rbi-itf-nbfc-2017
将 RMIT Malaysia 控件映射到 Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/rmit-malaysia
将 RMIT Malaysia 控件映射到 Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/rmit-malaysia
将 SOC 2 控件映射到 Azure Policy 计划https://learn.microsoft.com/en-us/azure/governance/policy/samples/soc-2
将 SOC 2 控件映射到 Azure Policy 计划https://learn.microsoft.com/en-us/azure/governance/policy/samples/soc-2
将西班牙 ENS 控件映射到 Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/spain-ens
将西班牙 ENS 控件映射到 Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/spain-ens
将 SWIFT CSP-CSCF 2021 控件映射到 Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/swift-csp-cscf-2021
将 SWIFT CSP-CSCF 2021 控件映射到 Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/swift-csp-cscf-2021
将 SWIFT CSP-CSCF 2022 控件映射到 Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/swift-csp-cscf-2022
将 SWIFT CSP-CSCF 2022 控件映射到 Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/swift-csp-cscf-2022
将 UK OFFICIAL 和 UK NHS 控件映射到 Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/ukofficial-uknhs
将 UK OFFICIAL 和 UK NHS 控件映射到 Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/ukofficial-uknhs
使用 Azure Policy 强制实施多重身份验证https://learn.microsoft.com/en-us/azure/governance/policy/tutorials/mfa-enforcement
配置
主题URL
了解 Machine Configuration 分配资源和元数据https://learn.microsoft.com/en-us/azure/governance/machine-configuration/concepts/assignments
分配内置 Machine Configuration 策略https://learn.microsoft.com/en-us/azure/governance/machine-configuration/how-to/assign-built-in-policies
创建自定义 Machine Configuration 策略定义https://learn.microsoft.com/en-us/azure/governance/machine-configuration/how-to/create-policy-definition
安装用于 Machine Configuration 的 GuestConfiguration 创作模块https://learn.microsoft.com/en-us/azure/governance/machine-configuration/how-to/develop-custom-package/1-set-up-authoring-environment
创建自定义 Machine Configuration 包项目https://learn.microsoft.com/en-us/azure/governance/machine-configuration/how-to/develop-custom-package/2-create-package
配置对 Azure Storage 中 Machine Configuration 包的访问权限https://learn.microsoft.com/en-us/azure/governance/machine-configuration/how-to/develop-custom-package/5-access-package
开发自定义 Machine Configuration 包https://learn.microsoft.com/en-us/azure/governance/machine-configuration/how-to/develop-custom-package/overview
查看和分析 Machine Configuration 合规性结果https://learn.microsoft.com/en-us/azure/governance/machine-configuration/how-to/view-compliance
配置 Azure Machine Configuration 的先决条件https://learn.microsoft.com/en-us/azure/governance/machine-configuration/overview/02-setup-prerequisites
配置 Machine Configuration 的网络和终结点https://learn.microsoft.com/en-us/azure/governance/machine-configuration/overview/03-network-requirements
配置 Azure Policy 分配 JSON 结构https://learn.microsoft.com/en-us/azure/governance/policy/concepts/assignment-structure
使用 ARM、CLI、PowerShell 定义 Azure Policy 证明https://learn.microsoft.com/en-us/azure/governance/policy/concepts/attestation-structure
使用 Azure Policy 别名访问资源属性https://learn.microsoft.com/en-us/azure/governance/policy/concepts/definition-structure-alias
了解 Azure Policy 定义结构基础知识https://learn.microsoft.com/en-us/azure/governance/policy/concepts/definition-structure-basics
在 Azure Policy 定义中配置参数https://learn.microsoft.com/en-us/azure/governance/policy/concepts/definition-structure-parameters
在 Azure Policy 中配置 addToNetworkGroup 效果https://learn.microsoft.com/en-us/azure/governance/policy/concepts/effect-add-to-network-group
配置 deployIfNotExists 效果和标识https://learn.microsoft.com/en-us/azure/governance/policy/concepts/effect-deploy-if-not-exists
在 Azure Policy 中配置 manual 效果和证明https://learn.microsoft.com/en-us/azure/governance/policy/concepts/effect-manual
配置 modify 效果和修正任务https://learn.microsoft.com/en-us/azure/governance/policy/concepts/effect-modify
在 Azure Policy for AKS 中使用 mutate 效果https://learn.microsoft.com/en-us/azure/governance/policy/concepts/effect-mutate
配置 Azure Policy 注册资源结构https://learn.microsoft.com/en-us/azure/governance/policy/concepts/enrollment-structure
定义 Azure Policy 豁免 JSON 配置https://learn.microsoft.com/en-us/azure/governance/policy/concepts/exemption-structure
使用 JSON 结构定义 Azure Policy 计划https://learn.microsoft.com/en-us/azure/governance/policy/concepts/initiative-definition-structure
配置 Azure Policy 修正任务结构https://learn.microsoft.com/en-us/azure/governance/policy/concepts/remediation-structure
了解和管理 Azure System Policy 分配https://learn.microsoft.com/en-us/azure/governance/policy/concepts/systempolicy
为数组属性创作 Azure Policy 规则https://learn.microsoft.com/en-us/azure/governance/policy/how-to/author-policies-for-arrays
以编程方式检索 Azure Policy 合规性数据https://learn.microsoft.com/en-us/azure/governance/policy/how-to/get-compliance-data
以编程方式创建和管理 Azure 策略https://learn.microsoft.com/en-us/azure/governance/policy/how-to/programmatically-create
使用 Azure Policy 修正不合规资源https://learn.microsoft.com/en-us/azure/governance/policy/how-to/remediate-resources
在 Azure Policy 规则中使用 requestContext().identityhttps://learn.microsoft.com/en-us/azure/governance/policy/how-to/using-request-context-identity
在 Azure Policy 中使用内置访客配置包https://learn.microsoft.com/en-us/azure/governance/policy/samples/built-in-packages
映射 Azure Policy 访客配置包和模块https://learn.microsoft.com/en-us/azure/governance/policy/samples/built-in-packages
创作自定义 Azure Policy 定义https://learn.microsoft.com/en-us/azure/governance/policy/tutorials/create-custom-policy-definition
使用策略禁止特定 Azure 资源类型https://learn.microsoft.com/en-us/azure/governance/policy/tutorials/disallowed-resources
使用 Azure Policy 配置标记治理https://learn.microsoft.com/en-us/azure/governance/policy/tutorials/govern-tags
通过 Azure Policy 添加用户分配的标识https://learn.microsoft.com/en-us/azure/governance/policy/tutorials/modify-virtual-machine-identity
集成与编码模式
主题URL
使用 Terraform HCL 分配 Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/assign-policy-terraform
将 Azure Policy 事件与 Event Grid 集成https://learn.microsoft.com/en-us/azure/governance/policy/concepts/event-overview
通过 Gatekeeper 在 Kubernetes 中使用 Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/concepts/policy-for-kubernetes
使用 Azure Policy VS Code 扩展处理别名https://learn.microsoft.com/en-us/azure/governance/policy/how-to/extension-for-vscode
在 Azure Policy 定义中使用 count 运算符https://learn.microsoft.com/en-us/azure/governance/policy/samples/pattern-count-operator
在 Azure Policy 定义中使用 count 运算符https://learn.microsoft.com/en-us/azure/governance/policy/samples/pattern-count-operator
使用 deployIfNotExists Azure Policy 部署资源https://learn.microsoft.com/en-us/azure/governance/policy/samples/pattern-deploy-resources
使用 deployIfNotExists Azure Policy 部署资源https://learn.microsoft.com/en-us/azure/governance/policy/samples/pattern-deploy-resources
在 Azure Policy 定义中应用不同的效果https://learn.microsoft.com/en-us/azure/governance/policy/samples/pattern-effect-details
在 Azure Policy 定义中应用不同的效果https://learn.microsoft.com/en-us/azure/governance/policy/samples/pattern-effect-details
在 Azure Policy 定义中使用字段属性https://learn.microsoft.com/en-us/azure/governance/policy/samples/pattern-fields
在 Azure Policy 定义中使用字段属性https://learn.microsoft.com/en-us/azure/governance/policy/samples/pattern-fields
将 Azure Policy 定义分组到计划中https://learn.microsoft.com/en-us/azure/governance/policy/samples/pattern-group-with-initiative
将 Azure Policy 定义分组到计划中https://learn.microsoft.com/en-us/azure/governance/policy/samples/pattern-group-with-initiative
在 Azure Policy 定义中使用逻辑运算符https://learn.microsoft.com/en-us/azure/governance/policy/samples/pattern-logical-operators
在 Azure Policy 定义中使用逻辑运算符https://learn.microsoft.com/en-us/azure/governance/policy/samples/pattern-logical-operators
参数化 Azure Policy 定义以便重用https://learn.microsoft.com/en-us/azure/governance/policy/samples/pattern-parameters
参数化 Azure Policy 定义以便重用https://learn.microsoft.com/en-us/azure/governance/policy/samples/pattern-parameters
使用 Azure Policy 定义管理资源标记https://learn.microsoft.com/en-us/azure/governance/policy/samples/pattern-tags
使用 Azure Policy 定义管理资源标记https://learn.microsoft.com/en-us/azure/governance/policy/samples/pattern-tags
在 Azure Policy 定义中使用 value 运算符https://learn.microsoft.com/en-us/azure/governance/policy/samples/pattern-value-operator
在 Azure Policy 定义中使用 value 运算符https://learn.microsoft.com/en-us/azure/governance/policy/samples/pattern-value-operator
使用 Azure Resource Graph 查询 Azure Policy 数据https://learn.microsoft.com/en-us/azure/governance/policy/samples/resource-graph-samples
使用 Azure Resource Graph 查询 Azure Policy 数据https://learn.microsoft.com/en-us/azure/governance/policy/samples/resource-graph-samples
使用 Azure Resource Graph 查询来宾配置数据https://learn.microsoft.com/en-us/azure/governance/policy/samples/resource-graph-samples-guest-configuration
将 Azure Policy 事件路由到 Event Gridhttps://learn.microsoft.com/en-us/azure/governance/policy/tutorials/route-state-change-events
部署
主题URL
使用 ARM 模板部署 Machine Configuration 分配https://learn.microsoft.com/en-us/azure/governance/machine-configuration/how-to/assign-configuration/azure-resource-manager
使用 Bicep 部署 Machine Configuration 分配https://learn.microsoft.com/en-us/azure/governance/machine-configuration/how-to/assign-configuration/bicep
使用模板分配 Machine Configuration 包https://learn.microsoft.com/en-us/azure/governance/machine-configuration/how-to/assign-configuration/overview
使用 REST API 创建 Machine Configuration 分配https://learn.microsoft.com/en-us/azure/governance/machine-configuration/how-to/assign-configuration/rest-api
使用 Terraform 部署 Machine Configuration 分配https://learn.microsoft.com/en-us/azure/governance/machine-configuration/how-to/assign-configuration/terraform
将 Machine Configuration 包发布到 Azure 存储https://learn.microsoft.com/en-us/azure/governance/machine-configuration/how-to/develop-custom-package/4-publish-package
导出 Azure Policy 资源以实现策略即代码https://learn.microsoft.com/en-us/azure/governance/policy/how-to/export-resources
在 Azure DevOps 管道中强制实施 Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/tutorials/policy-devops-pipelines

评论

支持 Markdown