What's new?
We've updated internal dependencies and now use the latest Azure SDK versions to discover and manage Storage resources in Guardrails. This release includes breaking changes in the CMDB data for storage accounts. We recommend updating your existing policy settings to refer to the updated attributes as mentioned below.
Renamed:
serviceProperties.blob.DeleteRetentionPolicy
toserviceProperties.blob.deleteRetentionPolicy
serviceProperties.blob.DeleteRetentionPolicy.Days
toserviceProperties.blob.deleteRetentionPolicy.days
serviceProperties.blob.DeleteRetentionPolicy.Enabled
toserviceProperties.blob.deleteRetentionPolicy.enabled
serviceProperties.blob.StaticWebsite
toserviceProperties.blob.staticWebsite
serviceProperties.blob.StaticWebsite.Enabled
toserviceProperties.blob.staticWebsite.enabled
serviceProperties.blob.logging
toserviceProperties.blob.blobAnalyticsLogging
serviceProperties.queue.logging
toserviceProperties.queue.queueAnalyticsLogging
Added:
serviceProperties.blob.deleteRetentionPolicy.AllowPermanentDelete
Modified:
- The data type of the attribute
serviceProperties.blob.cors
has been changed from string (""
) to array ([]
). - The data type of the attribute
serviceProperties.queue.cors
has been changed from string (""
) to array ([]
).
Users can now enable/disable
Blob logging
for storage accounts. To get started, set theAzure > Storage > Storage Account > Blob > Logging > *
policies.Users can now check if storage accounts are approved for use based on Infrastructure Encryption settings. To get started, set the
Azure > Storage > Storage Account > Approved > Infrastructure Encryption
policy.
Control Types
- Azure > Storage > Storage Account > Blob
- Azure > Storage > Storage Account > Blob > Logging
Renamed
- Azure > Storage > Storage Account > Public Access to Azure > Storage > Storage Account > Blob Public Access
Policy Types
- Azure > Storage > Storage Account > Approved > Infrastructure Encryption
- Azure > Storage > Storage Account > Blob
- Azure > Storage > Storage Account > Blob > Logging
- Azure > Storage > Storage Account > Blob > Logging > Properties
- Azure > Storage > Storage Account > Blob > Logging > Retention Days
Renamed
- Azure > Storage > Storage Account > Public Access to Azure > Storage > Storage Account > Blob Public Access
Action Types
- Azure > Storage > Storage Account > Update Storage Account Blob Logging
Renamed
- Azure > Storage > Storage Account > Set Public Access to Azure > Storage > Storage Account > Set Blob Public Access