Azure · erjosito · Jun 29, 2023 · Jun 29, 2023
@@ -1,14 +1,5 @@
 {
     "items": [
-        {
-            "category": "Network Topology and Connectivity",
-            "subcategory": "App delivery",
-            "text": "If you use customer-managed TLS certificates with Azure Front Door, use the 'Latest' certificate version. Reduce the risk of outages caused by manual certificate renewal.",
-            "waf": "Operations",
-            "guid": "f00a69de-7076-4734-a734-6e4552cad9e1",
-            "severity": "Medium",
-            "link": "https://learn.microsoft.com/azure/frontdoor/best-practices#use-latest-version-for-customer-managed-certificates"
-        },
         {
             "category": "Backup and Disaster Recovery",
             "subcategory": "Data Protection",
@@ -549,6 +540,15 @@
             "severity": "Medium",
             "link": "https://learn.microsoft.com/azure/automation/how-to/region-mappings"
         },
+        {
+            "category": "Network Topology and Connectivity",
+            "subcategory": "App delivery",
+            "text": "If you use customer-managed TLS certificates with Azure Front Door, use the 'Latest' certificate version. Reduce the risk of outages caused by manual certificate renewal.",
+            "waf": "Operations",
+            "guid": "f00a69de-7076-4734-a734-6e4552cad9e1",
+            "severity": "Medium",
+            "link": "https://learn.microsoft.com/azure/frontdoor/best-practices#use-latest-version-for-customer-managed-certificates"
+        },
         {
             "category": "Network Topology and Connectivity",
             "subcategory": "App delivery",
@@ -1968,6 +1968,6 @@
     "metadata": {
         "name": "Azure Landing Zone Review",
         "state": "GA",
-        "timestamp": "May 24, 2023"
+        "timestamp": "June 29, 2023"
     }
-}
+}
@@ -23,15 +23,6 @@
         }
     ],
     "items": [
-        {
-            "category": "Entrega de aplicaciones",
-            "guid": "f00a69de-7076-4734-a734-6e4552cad9e1",
-            "link": "https://learn.microsoft.com/azure/frontdoor/best-practices#use-latest-version-for-customer-managed-certificates",
-            "severity": "Medio",
-            "subcategory": "Entrega de aplicaciones",
-            "text": "Si usa certificados TLS administrados por el cliente con Azure Front Door, use la versión de certificado \"más reciente\". Reduzca el riesgo de interrupciones causadas por la renovación manual de certificados.",
-            "waf": "Operaciones"
-        },
         {
             "category": "Copia de seguridad y recuperación ante desastres",
             "guid": "7ea02e1c-7166-45a3-bdf5-098891367fcb",
@@ -572,6 +563,15 @@
             "text": "Considerar las regiones admitidas para el área de trabajo de Log Analytics vinculada y las cuentas de automatización",
             "waf": "Operaciones"
         },
+        {
+            "category": "Topología y conectividad de red",
+            "guid": "f00a69de-7076-4734-a734-6e4552cad9e1",
+            "link": "https://learn.microsoft.com/azure/frontdoor/best-practices#use-latest-version-for-customer-managed-certificates",
+            "severity": "Medio",
+            "subcategory": "Entrega de aplicaciones",
+            "text": "Si usa certificados TLS administrados por el cliente con Azure Front Door, use la versión de certificado \"más reciente\". Reduzca el riesgo de interrupciones causadas por la renovación manual de certificados.",
+            "waf": "Operaciones"
+        },
         {
             "category": "Topología y conectividad de red",
             "guid": "6138a720-0f1c-4e16-bd30-1d6e872e52e3",
@@ -593,6 +593,16 @@
             "training": "https://learn.microsoft.com/learn/paths/secure-application-delivery/",
             "waf": "Seguridad"
         },
+        {
+            "category": "Topología y conectividad de red",
+            "graph": "resources | where type == 'microsoft.network/loadbalancers' | project id, compliant=(tolower(sku.name) == 'standard')",
+            "guid": "4e35fbf5-0ae2-48b2-97ce-753353edbd1a",
+            "link": "https://learn.microsoft.com/azure/load-balancer/load-balancer-overview",
+            "severity": "Medio",
+            "subcategory": "Entrega de aplicaciones",
+            "text": "Asegúrese de que está usando la SKU estándar para los equilibradores de carga de Azure",
+            "waf": "Seguridad"
+        },
         {
             "category": "Topología y conectividad de red",
             "graph": "resources | where type=='microsoft.network/applicationgateways' | extend subnetId = tostring(properties.gatewayIPConfigurations[0].properties.subnet.id) | project id, subnetId | join (resources | where type=='microsoft.network/virtualnetworks' | project id,subnets=properties.subnets | mv-expand subnets | project id, subnetId = tostring(subnets.id), subnetPrefixLength = split(subnets.properties.addressPrefix, '/')[1]) on subnetId | extend compliant = (subnetPrefixLength <= 26) | distinct id,compliant",
@@ -1908,7 +1918,7 @@
     "metadata": {
         "name": "Azure Landing Zone Review",
         "state": "GA",
-        "timestamp": "May 24, 2023"
+        "timestamp": "June 29, 2023"
     },
     "severities": [
         {

@@ -23,15 +23,6 @@
         }
     ],
     "items": [
-        {
-            "category": "アプリ配信",
-            "guid": "f00a69de-7076-4734-a734-6e4552cad9e1",
-            "link": "https://learn.microsoft.com/azure/frontdoor/best-practices#use-latest-version-for-customer-managed-certificates",
-            "severity": "中程度",
-            "subcategory": "アプリ配信",
-            "text": "Azure Front Door でカスタマー マネージド TLS 証明書を使用する場合は、\"最新\" の証明書バージョンを使用します。証明書の手動更新による停止のリスクを軽減します。",
-            "waf": "オペレーションズ"
-        },
         {
             "category": "バックアップと災害復旧",
             "guid": "7ea02e1c-7166-45a3-bdf5-098891367fcb",
@@ -572,6 +563,15 @@
             "text": "リンクされた Log Analytics ワークスペースと自動化アカウントでサポートされているリージョンを検討する",
             "waf": "オペレーションズ"
         },
+        {
+            "category": "ネットワーク トポロジと接続性",
+            "guid": "f00a69de-7076-4734-a734-6e4552cad9e1",
+            "link": "https://learn.microsoft.com/azure/frontdoor/best-practices#use-latest-version-for-customer-managed-certificates",
+            "severity": "中程度",
+            "subcategory": "アプリ配信",
+            "text": "Azure Front Door でカスタマー マネージド TLS 証明書を使用する場合は、\"最新\" の証明書バージョンを使用します。証明書の手動更新による停止のリスクを軽減します。",
+            "waf": "オペレーションズ"
+        },
         {
             "category": "ネットワーク トポロジと接続性",
             "guid": "6138a720-0f1c-4e16-bd30-1d6e872e52e3",
@@ -593,6 +593,16 @@
             "training": "https://learn.microsoft.com/learn/paths/secure-application-delivery/",
             "waf": "安全"
         },
+        {
+            "category": "ネットワーク トポロジと接続性",
+            "graph": "resources | where type == 'microsoft.network/loadbalancers' | project id, compliant=(tolower(sku.name) == 'standard')",
+            "guid": "4e35fbf5-0ae2-48b2-97ce-753353edbd1a",
+            "link": "https://learn.microsoft.com/azure/load-balancer/load-balancer-overview",
+            "severity": "中程度",
+            "subcategory": "アプリ配信",
+            "text": "Azure ロード バランサーに標準 SKU を使用していることを確認する",
+            "waf": "安全"
+        },
         {
             "category": "ネットワーク トポロジと接続性",
             "graph": "resources | where type=='microsoft.network/applicationgateways' | extend subnetId = tostring(properties.gatewayIPConfigurations[0].properties.subnet.id) | project id, subnetId | join (resources | where type=='microsoft.network/virtualnetworks' | project id,subnets=properties.subnets | mv-expand subnets | project id, subnetId = tostring(subnets.id), subnetPrefixLength = split(subnets.properties.addressPrefix, '/')[1]) on subnetId | extend compliant = (subnetPrefixLength <= 26) | distinct id,compliant",
@@ -1908,7 +1918,7 @@
     "metadata": {
         "name": "Azure Landing Zone Review",
         "state": "GA",
-        "timestamp": "May 24, 2023"
+        "timestamp": "June 29, 2023"
     },
     "severities": [
         {

@@ -23,15 +23,6 @@
         }
     ],
     "items": [
-        {
-            "category": "앱 제공",
-            "guid": "f00a69de-7076-4734-a734-6e4552cad9e1",
-            "link": "https://learn.microsoft.com/azure/frontdoor/best-practices#use-latest-version-for-customer-managed-certificates",
-            "severity": "보통",
-            "subcategory": "앱 제공",
-            "text": "Azure Front Door에서 고객 관리형 TLS 인증서를 사용하는 경우 '최신' 인증서 버전을 사용합니다. 수동 인증서 갱신으로 인한 중단 위험을 줄입니다.",
-            "waf": "작업"
-        },
         {
             "category": "백업 및 재해 복구",
             "guid": "7ea02e1c-7166-45a3-bdf5-098891367fcb",
@@ -572,6 +563,15 @@
             "text": "연결된 Log Analytics 작업 영역 및 자동화 계정에 대해 지원되는 지역 고려",
             "waf": "작업"
         },
+        {
+            "category": "네트워크 토폴로지 및 연결",
+            "guid": "f00a69de-7076-4734-a734-6e4552cad9e1",
+            "link": "https://learn.microsoft.com/azure/frontdoor/best-practices#use-latest-version-for-customer-managed-certificates",
+            "severity": "보통",
+            "subcategory": "앱 제공",
+            "text": "Azure Front Door에서 고객 관리형 TLS 인증서를 사용하는 경우 '최신' 인증서 버전을 사용합니다. 수동 인증서 갱신으로 인한 중단 위험을 줄입니다.",
+            "waf": "작업"
+        },
         {
             "category": "네트워크 토폴로지 및 연결",
             "guid": "6138a720-0f1c-4e16-bd30-1d6e872e52e3",
@@ -593,6 +593,16 @@
             "training": "https://learn.microsoft.com/learn/paths/secure-application-delivery/",
             "waf": "안전"
         },
+        {
+            "category": "네트워크 토폴로지 및 연결",
+            "graph": "resources | where type == 'microsoft.network/loadbalancers' | project id, compliant=(tolower(sku.name) == 'standard')",
+            "guid": "4e35fbf5-0ae2-48b2-97ce-753353edbd1a",
+            "link": "https://learn.microsoft.com/azure/load-balancer/load-balancer-overview",
+            "severity": "보통",
+            "subcategory": "앱 제공",
+            "text": "Azure Load Balancer에 표준 SKU를 사용하고 있는지 확인합니다.",
+            "waf": "안전"
+        },
         {
             "category": "네트워크 토폴로지 및 연결",
             "graph": "resources | where type=='microsoft.network/applicationgateways' | extend subnetId = tostring(properties.gatewayIPConfigurations[0].properties.subnet.id) | project id, subnetId | join (resources | where type=='microsoft.network/virtualnetworks' | project id,subnets=properties.subnets | mv-expand subnets | project id, subnetId = tostring(subnets.id), subnetPrefixLength = split(subnets.properties.addressPrefix, '/')[1]) on subnetId | extend compliant = (subnetPrefixLength <= 26) | distinct id,compliant",
@@ -1908,7 +1918,7 @@
     "metadata": {
         "name": "Azure Landing Zone Review",
         "state": "GA",
-        "timestamp": "May 24, 2023"
+        "timestamp": "June 29, 2023"
     },
     "severities": [
         {

@@ -23,15 +23,6 @@
         }
     ],
     "items": [
-        {
-            "category": "Entrega de aplicativos",
-            "guid": "f00a69de-7076-4734-a734-6e4552cad9e1",
-            "link": "https://learn.microsoft.com/azure/frontdoor/best-practices#use-latest-version-for-customer-managed-certificates",
-            "severity": "Média",
-            "subcategory": "Entrega de aplicativos",
-            "text": "Se você usar certificados TLS gerenciados pelo cliente com o Azure Front Door, use a versão de certificado 'Mais recente'. Reduza o risco de paralisações causadas pela renovação manual de certificados.",
-            "waf": "Operações"
-        },
         {
             "category": "Backup e recuperação de desastres",
             "guid": "7ea02e1c-7166-45a3-bdf5-098891367fcb",
@@ -572,6 +563,15 @@
             "text": "Considere as regiões com suporte para contas vinculadas de espaço de trabalho e automação do Log Analytics",
             "waf": "Operações"
         },
+        {
+            "category": "Topologia de rede e conectividade",
+            "guid": "f00a69de-7076-4734-a734-6e4552cad9e1",
+            "link": "https://learn.microsoft.com/azure/frontdoor/best-practices#use-latest-version-for-customer-managed-certificates",
+            "severity": "Média",
+            "subcategory": "Entrega de aplicativos",
+            "text": "Se você usar certificados TLS gerenciados pelo cliente com o Azure Front Door, use a versão de certificado 'Mais recente'. Reduza o risco de paralisações causadas pela renovação manual de certificados.",
+            "waf": "Operações"
+        },
         {
             "category": "Topologia de rede e conectividade",
             "guid": "6138a720-0f1c-4e16-bd30-1d6e872e52e3",
@@ -593,6 +593,16 @@
             "training": "https://learn.microsoft.com/learn/paths/secure-application-delivery/",
             "waf": "Segurança"
         },
+        {
+            "category": "Topologia de rede e conectividade",
+            "graph": "resources | where type == 'microsoft.network/loadbalancers' | project id, compliant=(tolower(sku.name) == 'standard')",
+            "guid": "4e35fbf5-0ae2-48b2-97ce-753353edbd1a",
+            "link": "https://learn.microsoft.com/azure/load-balancer/load-balancer-overview",
+            "severity": "Média",
+            "subcategory": "Entrega de aplicativos",
+            "text": "Verifique se você está usando a SKU padrão para seus Balanceadores de Carga do Azure",
+            "waf": "Segurança"
+        },
         {
             "category": "Topologia de rede e conectividade",
             "graph": "resources | where type=='microsoft.network/applicationgateways' | extend subnetId = tostring(properties.gatewayIPConfigurations[0].properties.subnet.id) | project id, subnetId | join (resources | where type=='microsoft.network/virtualnetworks' | project id,subnets=properties.subnets | mv-expand subnets | project id, subnetId = tostring(subnets.id), subnetPrefixLength = split(subnets.properties.addressPrefix, '/')[1]) on subnetId | extend compliant = (subnetPrefixLength <= 26) | distinct id,compliant",
@@ -1908,7 +1918,7 @@
     "metadata": {
         "name": "Azure Landing Zone Review",
         "state": "GA",
-        "timestamp": "May 24, 2023"
+        "timestamp": "June 29, 2023"
     },
     "severities": [
         {