You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Currently hub network modules deploy bastion subnet AzureBastionSubnet without NSGs. The AzureBastionSubnet subnet supports NSGs and it is a Well-Architected Framework (WAF) recommendation to deploy all subnets with NSGs. No specific exclusion applies for AzureBastionSubnet.
Describe the solution you'd like
Currently hub network modules deploy bastion subnet
AzureBastionSubnet
without NSGs. TheAzureBastionSubnet
subnet supports NSGs and it is a Well-Architected Framework (WAF) recommendation to deploy all subnets with NSGs. No specific exclusion applies forAzureBastionSubnet
.Requirements for Bastion NSG is here: https://docs.microsoft.com/azure/bastion/bastion-nsg#nsg
See:
Additional context
This is reported by PSRule for Azure: https://azure.github.io/PSRule.Rules.Azure/en/rules/Azure.VNET.UseNSGs/
Related to #206
The text was updated successfully, but these errors were encountered: