Content by stevenbucher (4)

stevenbucher announces public preview support for versioning custom Azure Policy definitions and initiatives, including how to create new versions, pin assignments to major/minor versions, and validate which version is effective via REST API, portal, CLI, and PowerShell.

stevenbucher introduces a new Compliance Substate property for Azure Policy exemptions, making it possible to see whether exempt resources would be compliant or non-compliant if the exemption were removed. The post shows where to enable the column in the Azure portal and how to query the field at scale using Azure Resource Graph.

stevenbucher explains how Azure Policy for Kubernetes can now enforce policies using Kubernetes Validating Admission Policy (VAP) with CEL, via Gatekeeper’s integration. The post contrasts the older webhook/Rego flow with in-process validation, then walks through packaging a CEL constraint template into an Azure Policy definition and rolling it out across AKS clusters.

Steven Bucher discusses Azure CLI and PowerShell's new 'What if' and 'Export Bicep' features, helping practitioners safely preview command impacts and generate reusable Bicep templates.