Catégorie : Divers

TLS 1.2 to become the minimum TLS version for Azure Storage

Hi!

To align with evolving technology and regulatory standards, Azure Storage will cease support for TLS versions 1.1 and 1.0, with the new minimum supported version being TLS 1.2, effective November 1, 2024. TLS 1.2 not only offers enhanced security but also delivers faster performance compared to its older counterparts. It’s important to note that TLS 1.0 and 1.1 lack support for modern cryptographic algorithms and cipher suites.

This transition will affect both existing and new storage accounts utilizing TLS 1.0 and 1.1 across all cloud environments. To ensure uninterrupted connectivity to Azure Storage for your applications, it is imperative to undertake a migration to TLS 1.2 and eliminate any dependencies on TLS versions 1.0 and 1.1.

Documentation: https://azure.microsoft.com/en-us/updates/tls-12-to-become-the-minimum-tls-version-for-azure-storage/

Maxime.

Azure Resource Graph Policy Exceptions 

Hi!

I’m excited to share that you can now harness the power of Azure Resource Graph to effortlessly retrieve all policy exceptions. This is made even more seamless with the introduction of the new field: microsoft.authorization/policyexemptions.

Example: Extract all the policies which expire within 90 days

PolicyResources | where type == 'microsoft.authorization/policyexemptions' | extend expiresOnC = todatetime(properties.expiresOn) | where isnotnull(expiresOnC) | where expiresOnC >= now() and expiresOnC < now(+90d) | project name, expiresOnC

Example: All the policies exceptions per assignment

PolicyResources | where type == 'microsoft.authorization/policyexemptions' | summarize count() by tostring(properties.policyAssignmentId)

Maxime.