New Azure Policies

Promoted the following policies from Internal Cigna Repository:
Redis Cache

• redis_cache_tls_requirement.rego
• redis_cache_require_ssl_port.rego
• redis_cache_restrict_public_access.rego

App Service

• web_app_tls_requirement.rego
• web_app_https_requirement.rego
• logic_app_https_requirement.rego
• logic_app_tls_requirement.rego
• functionapp_tls_requirement.rego
• functionapp_https_requirement.rego

Database

• postgresql_require_geo_redundancy.rego
• sql_require_geo_redundancy.rego
• maria_db_require_geo_redundancy.rego
• mysql_require_geo_redundancy.rego
• cosmos_db_restrict_public_access.rego

Compute

• virtual_machine_auto_update.rego
• virtual_machine_sku_limits.rego

Networking

• front_door_https.rego
• front_door_waf_enabled.rego
• nat_gateway.rego
• app_gateway_waf_enabled.rego

Monitoring

• log_analytics_disable_internet_queries.rego

Key Vault

• key_vault_restrict_network_access.rego
• key_vault_purge_protection.rego
• key_vault_rbac_authorization.rego

Storage

• storage_account_https.rego
• public_storage_account.rego
• storage_account_tls.rego

Cognitive Services & DataBricks

• databricks_require_cmk.rego
• cognitive_services_public.rego
• cognitive_services_cmk.rego
• cognitive_services_local_authentication.rego
• cognitive_services_restrict_network_access.rego

v1.0.0

Initial ruleset