Issues

• Cognitive Services built-ins: two definitions missing and one version stale compared to the live catalog

  Azure/azure-policy#1611 · Filter by author cpinotossi opened on Sep 30, 2026

• bug(aks/blocknakedpods): StatefulSet orphan deletions are not allowed

  Azure/azure-policy#1610 · Filter by author onelapahead opened on Sep 28, 2026

• Kubernetes Policy Version Upgrades

  Azure/azure-policy#1609 · Filter by author dclifford97 opened on Sep 25, 2026

• Built-in policy "Enable logging by category group for Bastions... to Log Analytics" fails when categoryGroup=allLogs in Belgium Central

  Azure/azure-policy#1608 · Filter by author aurelien-etienne opened on Sep 11, 2026

• Built-in Policy 2465583e-4e78-4c15-b6be-a36cbc7c8b0f does not support configurable diagnostic setting name

  Azure/azure-policy#1603 · Filter by author kumarpk3456 opened on Sep 1, 2026

• Allowed-locations: Exclude Microsoft.AzureActiveDirectory/guestusages

  Azure/azure-policy#1602 · Filter by author nilsjman opened on Sep 1, 2026

• Policy:PolicyName: "Configure Microsoft Defender CSPM plan" references isEntraPermissionsManagementEnabled which is defunct product

  Azure/azure-policy#1600 · Filter by author jkerai1 opened on Aug 25, 2026

• DORA Azure Policy Initiative – Implementation in Azure Landing Zones

  Azure/azure-policy#1599 · Filter by author DrThuraya opened on Aug 24, 2026

• policy requests Privileged Owner RBAC role, update to granular RBAC inline with least privilege principle

  Azure/azure-policy#1598 · Filter by author nickharris opened on Aug 21, 2026

• RemoveBlockedAccountsWithOwnerPermissions - Security Assessment ID update

  Azure/azure-policy#1595 · Filter by author ThomasCl opened on Aug 10, 2026

• PublicEndpoint_AINE and PublicEndpoint_DINE: APIM configuration endpoint policies incorrectly apply to unsupported v2 SKUs

  Azure/azure-policy#1593 · Filter by author TacticalNuclearSpud opened on Jul 31, 2026

• AMA Windows policies miss new 'windowsserver2022' Marketplace offer — WS2022 VMs from migrated images out of scope

  Azure/azure-policy#1591 · Filter by author nbachm opened on Jul 30, 2026

• AllowedLocations_Deny: Azure External ID tenant creation is blocked due to missing ciamDirectories resource type exclusion

  Azure/azure-policy#1589 · Filter by author x0Armin0x opened on Jul 10, 2026

• Add microsoft.web/sites to the "Enable category group resource logging for supported resources to Log Analytics" initiative

  Azure/azure-policy#1587 · Filter by author JamesDLD opened on Jun 24, 2026

• Built-in policy "API Management service should use a SKU that supports virtual networks" (73ef9241) missing V2 SKUs in allowedValues

  Azure/azure-policy#1582 · Filter by author mattduguid opened on Jun 3, 2026

• Built-in policy "Adds a tag to Network Virtual Appliances (NVAs) VMs and VMSS for MANA support" fails assignment with TooManyCountExpressions

  Azure/azure-policy#1578 · Filter by author abdohanafy opened on May 28, 2026

• uilt-in Policy DeployAzureMonitoringAgentLinuxVMWithUAI (ae8a10e6) does not include austriaeast in the location allowlist — AMA cannot be deployed via policy in Austria East

  Azure/azure-policy#1577 · Filter by author Dungeonlords opened on May 28, 2026

• Policy name has an extra trailing space

  Azure/azure-policy#1572 · Filter by author azaceta opened on May 15, 2026

• Azure Policy to audit and get all Unknown/Orphraned RBACs: Microsoft.Authorization/roleAssignments/Name

  Azure/azure-policy#1570 · Filter by author nazirakz opened on May 6, 2026

• DataConnectorsAzureActivity: Limit scope for MI roles

  Azure/azure-policy#1568 · Filter by author simhje opened on Apr 27, 2026

• Azure Firewall built-in diagnostic policy missing support for resource-specific tables (logAnalyticsDestinationType)

  Azure/azure-policy#1567 · Filter by author AliRz90 opened on Apr 21, 2026

• StorageAccountAllowCrossTenantReplication reports violations on complaint Storage Accounts when allowCrossTenantReplication not explicitly set

  Azure/azure-policy#1566 · Filter by author HenriBlacksmith opened on Apr 20, 2026

• Supports

  Azure/azure-policy#1563 · Filter by author Adam9911 opened on Mar 27, 2026

• Built in policy "Deploy export to Log Analytics workspace for Microsoft Defender for Cloud data" cannot be disabled by parameter

  Azure/azure-policy#1561 · Filter by author rafabu opened on Mar 25, 2026

• Built in policy "Security Center/Configure Microsoft Defender for Servers plan" never reports compliant when plan "P1" is configured

  Azure/azure-policy#1560 · Filter by author rafabu opened on Mar 24, 2026