Build management-group custom policy IDs with the correct ARM resource scope
Which ARM resource-ID function distinguishes a management-group custom policy definition from a built-in definition?
Read the guideDSE security knowledge hubSecurity knowledge,
Security knowledge,
without the noise.
Page 124 of the DSE Security Knowledge Hub, with source-backed guidance, checklists, explainers, and playbooks.
DSE-authoredOfficial sourcesReviewed guidance
Search the library DSE post stream
3,000 articlesGuidance and analysis from DSE
Do not expect Azure Firewall private SNAT ranges to preserve application-rule source addresses
The private-range setting controls network-rule SNAT; application rules always use source translation.
Read the guide
Test Azure Policy evaluation while enforcement is disabled
Does a nonblocking policy assignment still provide compliance evidence for integration testing?
Read the guide
Re-resolve Service Fabric endpoints after the listener rejects a stale identity
How should an internal client respond when a reused address no longer belongs to its intended Service Fabric service?
Read the guide
Check GRUB identifiers when Site Recovery reports error 95320
Why can device-name references in GRUB prevent a Linux machine from being protected by Site Recovery?
Read the guide
Do not assume a base blob's lease governs its snapshot
Does a lease associated with an Azure block blob also apply to a snapshot of that blob?
Read the guide
Do not treat Azurite OAuth acceptance as a production authorization test
Azurite's basic OAuth checks do not verify token signatures or permissions.
Read the guide
Reconfigure File Sync managed identity when registering an entirely new server
New endpoints on configured servers and newly registered Windows servers do not inherit identity settings in the same way.
Read the guide
Account for deferred SMB close before a REST client uses the file ETag
Why can a REST operation report a concurrent modification after a Linux SMB writer has closed the file?
Read the guide
Allow for a restart when using VM Reapply during extension recovery
Can a Windows VM Reapply be treated as a guaranteed no-downtime extension-recovery action?
Read the guide