Forum Discussion
Eable/Disable Selective ASC Policies
Hi,
Is there a way to selectively disable (not have the policy active) a secure policy either at the subscriptoon or resource group level?
For example, if a policy is to recommend VM firewalls to be enabled, and this is not required, is there a way to deactivate this particular policy in the ASC dashboard?
Also any pointers to more specific ASC configuration will appreciated.
Regards
J
5 Replies
Hi JoVuon ,
Yes, this is possible.
Please check the following two articles:
- Working with security policies
- Policy exemption (preview) feature or more traditional exclusions (excluded scopes) in policy assignments
- Hi David,
Besides the expiry of exemption, is there other differences compared to exclusions? What is MS design goal for exemption given we could exclude it? Or phrasing it differently, what goals it trying to fulfil with exemptions?
Another point, I find update a large policy such as the ASC cumbersome via the Portal, is there an alternative, ie CLI?
Many thanks
Joe- StanislavBelov
Microsoft
Hi JoVuon ,
You can find info on how these two differ here: https://docs.microsoft.com/en-us/azure/governance/policy/concepts/scope#assignment-scopes. In short, we added exemptions, as requested by many customers, to provide more granular control of what resources/assets you can permanently or temporarily exempt from secure score evaluation/reporting.
As far as the azure policy management, there are many ways of doing so, please visit: Overview of Azure Policy - Azure Policy | Microsoft Docs
