• Added Policy Exceptions module
• Added optional variable for custom Policy assignment_name
• Bug-fix definition display name property
• Enhanced all module readme's by adding multiple examples
• Initial GitHub workflows
• Removed Custom CIS Benchmark Module example in favor of built-in example

• Added Azure Policy Custom Guest Configuration (CGC), includes:
  • PowerShell script to build and publish Guest Config Policies & Packages
  • terraform examples that demonstrate CGC Workflow
• Simplified and fixed set_assignment logic
• Definition display name and description is now optional and can be populated from the .json file itself
• Fixed the v2 library upgrade script which incorrectly named rules{} -> policyRule{}
  • updated all polices to reflect the same ^
• Role Assignments are now optional with skip_role_assignment flag

Removes metadata from assignment modules

An issue exists where policy assignment metadata conflicts with provider-generated metadata resulting in an inconsistent final plan on plan/apply stages. These attributes have been removed and a provider bug will be raised.

Azure has since introduced the system_data attribute to both policy definitions and assignments which includes these meta fields: createdBy, createdOn, updatedBy, updatedOn and is therefore no longer needed.

• No longer restriced to TF <= 13.6
• Simplified policy library (added update helper script)
• Migrate to new provider resources:
  • azurerm_management_group_policy_assignment
  • azurerm_subscription_policy_assignment
  • azurerm_resource_group_policy_assignment
  • azurerm_resource_policy_assignment
• Simplified remediation role assignments by embedding into policy assignment modules
• Readme updates

1.2.0

• Restrict to TF <= 13.6 - see issue 11327
• BugFix: Inconsistent final plan when using default varialbe value null instead of ""
• Readme updates
• Policy library additions & updates:
  • Compute
  • Monitoring
  • Security Center

• identity_id Output simplified for DINE & Modify Assignment Managed Identities
• Bug Fix: Initiative module now generates unique reference_id for the policy_definition_reference block in order to prevent targetting requirements for plan/apply cycle issues
• Added Azure Security Center policies to Library
• Added Compute (VM Diagnostics Agent LAD/WAD) policies to Library
• Examples updated with Azure Security Center policies in use