What's new?

• Disk export and upload URLs can now be required to use Microsoft Entra ID sign-in. Set the new Azure > Compute > Disk > Data Access Authentication Mode policy to Check: Azure Active Directory to alarm on disks whose URLs work without sign-in, or to Enforce: Azure Active Directory to update them. Disks that never had the setting count as None.
• Azure Backup and Azure Site Recovery don't support disks set to Azure Active Directory, so check those disks before enforcing.

Control Types

Added

• Azure > Compute > Disk > Data Access Authentication Mode

Policy Types

Added

• Azure > Compute > Disk > Data Access Authentication Mode

Action Types

Added

• Azure > Compute > Disk > Update Data Access Authentication Mode