epac-generic-policy
Latest: v1.2.1
Category
Governance
Total Versions
17
Last Updated
4/9/2026
Release History
v1.2.1 Latest
Changes:
- • Added 'APF-Audit orphaned Network Interfaces'
- • Merged PR 17959: apf-gen_add_policy
v1.2.0
Changes:
- • Added builtin policies:
- • Configure Windows virtual machines to run Azure Monitor Agent with system-assigned managed identity-based authentication
- • Configure Linux virtual machines to run Azure Monitor Agent with system-assigned managed identity-based authentication
- • Removed custom policy (replaced by built-in policy):
- • AFS-Deploy Azure Monitoring Agent on Windows machines
- • Merged PR 17766: epac_generic_add_policies
v1.1.8
Changes:
- • Add policy 'APF-Deny BGP route propagation on route tables'
- • Merged PR 17462: EPAC_add_policy
v1.1.7
Changes:
- • Added custom policy 'APF-Deny route with next hop type Internet on route tables'
- • Policy prevents routes directly to internet to avoid bypassing FW/NVA
- • Merged PR 17270: Updated apf-deny-route-with-next-hop-type-internet-on-rt.jsonc
v1.1.6
Changes:
- • Added the ACT - Nightly build trigger as a pipeline resource trigger. Pipeline will then only run the test stage every night. Removed src trigger
- • Merged PR 17093: Add nightly build trigger to pipeline configuration and update pull request t...
v1.1.5
Changes:
- • Fix: naming convention
- • Merged PR 16587: Add minus after APF
v1.1.4
Changes:
- • Update policy"APF-Require tag on RG [Environment]" Policy now has a parameter 'AllowedTagValue' 'AllowedTagValue' has default values dev, tst, acc, prd
- • Merged PR 16536: Updated apf-require-tag-on-rg-environment.jsonc
v1.1.3
Changes:
- • Add defaultsValues to the definition sets from gen-auzre-policy to the definition sets for Epac
- • Merged PR 16419: add parameters form gen-auzre-policy as default values in de defintion sets.
v1.1.2
Changes:
- • Add extra info to the parameters section.
- • Merged PR 16332: Implement feature X to enhance user experience and optimize performance
v1.1.1
Changes:
- • Fixed issues withpolicyDefinitionReferenceIds Removed2 built-inpolicies that was also in the container platform policy set:"Kubernetes clusters should be accessible only over HTTP""Temp disks and cache for agent node pools in Azure Kubernetes Service clusters should be encrypted at host"
- • Merged PR 16275: Refactor code structure for improved readability and maintainability
v1.1.0
Changes:
- • Created the policy Definition Set with a script based on the policy Definitions to prevent errors.
- • The script also generates the policyDefinitionReferenceId automatic based on the Displayname of the policy for consistency.
- • Merged PR 16221: Create policy DefinitionSet using script to prevent errors
v1.0.3
Changes:
- • remove policy notallowedresourcetypes policy from default policy set.We don't use it by default.
- • Merged PR 16062: Remove NotAllowedResourceTypes policy definition and parameters from apf-poli...
v1.0.2
Changes:
- • Defaultvalue fornotallowedresourcetypes configured.Default value is: []
- • Merged PR 16060: Add default value for NotAllowedResourceTypes in apf-policy-initiative.jsonc
v1.0.1
Changes:
- • Add Readme.md Add example directory under docs
- • Merged PR 15970: Update category in apf-policy-initiative.jsonc to reflect Automation
v1.0.0 Breaking
Changes:
- • First published version
- • Merged PR 15923: Updated apf-policy-initiative.jsonc
v0.1.2
Changes:
- • First version migrated from gen-azure-policy version 4.3.0
- • Merged PR 15861: Remove definition that are not in de definition set.
v0.1.1
Changes:
- • First version migrated from gen-azure-policy version 4.3.0
- • Merged PR 15836: Remove unused builtin-cleaned.json file