Allow Resource Type

Type: operation

Intent

What was blocked is now validated and available to every landing zone at once.

Design Decisions

Steps

  1. Read all design decisions in decisions[].
  2. Add the resource type to allowedResources.json.
  3. Use mcp__azure__documentation microsoft_docs_search to find the built-in diagnostic settings policy — add it to diagnosticSettings.bicepparam.
  4. For each file in oases/, use mcp__azure__documentation microsoft_docs_search to find built-in policies with the required effect — add matching entries.
  5. For each gap where no built-in policy provides the required effect, author a custom definition in customDefinitions/ and register it in policyDefinitions.bicepparam.
  6. Check defenderForCloudExemptions.jsonc for paid-SKU recommendations specific to this resource type — add qualifying entries.
  7. Check accessControl.bicepparam for custom role actions needed by this resource type.
  8. Present a complete draft of all changes before implementing.

Files

Violations

← Back to operations