ALZ Policy Version Pinning Update

[Springstone]

Overview/Summary

This pull request includes updates to multiple policy assignment templates to include a new policyVersion variable and to update the apiVersion for each policy assignment resource. The changes ensure that the policy assignments reference the correct policy versions and use the latest API versions.

Key changes include:

Policy Version Updates:

• Added policyVersion variable to each policy assignment template to specify the version of the policy definition being used. (AUDIT-AppGwWafPolicyAssignment.json, AUDIT-ResourceRGLocationPolicyAssignment.json, AUDIT-ZoneResilientPolicyAssignment.json, DENY-AksPrivEscalationPolicyAssignment.json, DENY-AksPrivilegedPolicyAssignment.json, DENY-AksWithoutHttpsPolicyAssignment.json, DENY-ClassicResourceTypesPolicyAssignment.json, DENY-HybridNetworkingPolicyAssignment.json, DENY-IPForwardingPolicyAssignment.json, DENY-PublicIpAddressOnNICPolicyAssignment.json, DENY-PublicIpAddressPolicyAssignment.json, DENY-StorageWithoutHttpsPolicyAssignment.json, DENY-VMUnmanagedDiskPolicyAssignment.json) [1] [2] [3] [4] [5] [6] [7] [8] [9] [10] [11] [12] [13]

API Version Updates:

• Updated apiVersion for each policy assignment resource to 2024-04-01 to ensure compatibility with the latest Azure API. (AUDIT-AppGwWafPolicyAssignment.json, AUDIT-ResourceRGLocationPolicyAssignment.json, AUDIT-ZoneResilientPolicyAssignment.json, DENY-AksPrivEscalationPolicyAssignment.json, DENY-AksPrivilegedPolicyAssignment.json, DENY-AksWithoutHttpsPolicyAssignment.json, DENY-ClassicResourceTypesPolicyAssignment.json, DENY-HybridNetworkingPolicyAssignment.json, DENY-IPForwardingPolicyAssignment.json, DENY-PublicIpAddressOnNICPolicyAssignment.json, DENY-PublicIpAddressPolicyAssignment.json, DENY-StorageWithoutHttpsPolicyAssignment.json, DENY-VMUnmanagedDiskPolicyAssignment.json) [1] [2] [3] [4] [5] [6] [7] [8] [9] [10] [11] [12] [13]

Testing URLs

Azure Public