Workload Specific Compliance Update

[Springstone]

Overview/Summary

This pull request involves multiple changes to the eslzArm/eslz-portal.json file, primarily focused on updating the default values and labels for various policy initiatives to ensure better compliance tracking and enforcement.

Key changes include:

• Policy Descriptions:

  • Updated the description text in the Microsoft.Common.InfoBox to provide clearer distinctions between "Enforce," "Audit only," and "Disabled" policies.

• Default Values and Labels:

  • Changed the defaultValue for multiple policy initiatives from "No" to "Audit only" to ensure that non-compliant actions are logged by default. [1] [2] [3] [4] [5] [6] [7] [8] [9] [10] [11] [12] [13]
  • Updated the allowedValues labels for policy initiatives to "Enforce," "Audit only," and "Disabled" for better clarity and consistency. [1] [2] [3] [4] [5] [6] [7] [8] [9] [10] [11] [12] [13]

Azure Public

[arjenhuitema]

@Springstone, thanks for making these changes. I left one comment on a toolTip, but this applies to multiple. Can you review and update the toolTip’s to align with the new label names?

[arjenhuitema]

@Springstone while reviewing a deployment, I noticed that some initiatives use default values even though I set it to Audit only.

Enforce recommended guardrails for Bot Service:

Enforce recommended guardrails for Cognitive Services:

Can you review?

Edit - missed the enforcement mode setting. All good.

[arjenhuitema]

LGTM