Skip to content

Commit

Permalink
Browse files Browse the repository at this point in the history
  • Loading branch information
Sebastian Claesson committed Oct 24, 2024
2 parents 883bab9 + ea1809b commit a397368
Show file tree
Hide file tree
Showing 2 changed files with 21 additions and 5 deletions.
18 changes: 17 additions & 1 deletion _posts/2023-04-04-AzurePolicyTearDownEnvironment.md
Original file line number Diff line number Diff line change
Expand Up @@ -105,4 +105,20 @@ This is great! It means we cannot utilize the deployment mode functionality to w

## Deployment script with deletion.

## Fetch all information and dump on public storage account using copy backbone
## Fetch all information and dump on public storage account using copy backbone

## Overprivileged roles
Many of the builtin and community policies which uses the deploy if not exists use overprivileged roles.
Look at this table;
<Tavle of content with statistics of role and target resources>

The role itself will be inherited to your policy set (initiative) and could be used by a policy to gain access.

# Copy data using backbone
# Leak SAS tokens
# Leak VPN IP and shared key

## Policy lifecycle tools
- AzOps
- Enterprise Policy As Code
- Azure landing zone repo
8 changes: 4 additions & 4 deletions _posts/2024-10-06-SubscriptionVending.md
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ description: Subscription Vending guide for Azure Landing Zones
author: Sebastian Claesson
date: 2024-10-06 00:55:00
categories: [Azure, Subscription vending]
tags: [powershell,azure,subscription,landing zone,vending,machine,vendingmachine,automation,permissions,ea,mca,rest] # TAG names should always be lowercase
tags: [powershell,sebastian,claesson,azure,subscription,landing zone,vending,machine,vendingmachine,automation,permissions,ea,mca,rest] # TAG names should always be lowercase
---

# Introduction
Expand Down Expand Up @@ -343,10 +343,10 @@ stages:
pwsh: true
ScriptPath: 'New-AzureSubscription.ps1'
ScriptArguments: >
-Identifier '$``{{ parameters.Identifier ``}}'
-BillingScope '${{ parameters.BillingScope }}'
-Identifier '$`\{`\{ parameters.Identifier `\}}'
-BillingScope '$`\{{ parameters.BillingScope }}'
-Workload 'Production'
-ManagementGroupId '/providers/Microsoft.Management/managementGroups/${{ parameters.ManagementGroupName }}'
-ManagementGroupId '/providers/Microsoft.Management/managementGroups/${`\{ parameters.ManagementGroupName }}'
-EnvironmentShortName '$(variableOutput.environmentShortName)'
-DisplayName '${{ parameters.DisplayName }}'
```
Expand Down

0 comments on commit a397368

Please sign in to comment.