Merge pull request #209629 from seligj95/septpolicyupdates

September policy updates

Author: Jak-MS

articles/app-service/security-controls-policy.md

@@ -1,7 +1,7 @@
 ---
 title: Azure Policy Regulatory Compliance controls for Azure App Service
 description: Lists Azure Policy Regulatory Compliance controls available for Azure App Service. These built-in policy definitions provide common approaches to managing the compliance of your Azure resources.
-ms.date: 09/12/2022
+ms.date: 09/19/2022
 ms.topic: sample
 ms.service: app-service
 ms.custom: subject-policy-compliancecontrols
@@ -21,7 +21,65 @@ compliant with the specific standard.
 
 ## Release notes
 
+### September 2022
+
+- **App Service apps should be injected into a virtual network**
+  - Update scope of policy to remove slots
+    - Creation of "App Service app slots should be injected into a virtual network" to monitor slots
+- **App Service app slots should be injected into a virtual network**
+  - New policy created
+- **Function apps should have 'Client Certificates (Incoming client certificates)' enabled**
+  - Update scope of policy to remove slots
+    - Creation of "Function app slots should have 'Client Certificates (Incoming client certificates)' enabled" to monitor slots
+- **Function app slots should have 'Client Certificates (Incoming client certificates)' enabled**
+  - New policy created
+- **Function apps should use an Azure file share for its content directory**
+  - Update scope of policy to remove slots
+    - Creation of "Function app slots should use an Azure file share for its content directory" to monitor slots
+- **Function app slots should use an Azure file share for its content directory**
+  - New policy created
+- **App Service apps should have 'Client Certificates (Incoming client certificates)' enabled**
+  - Update scope of policy to remove slots
+    - Creation of "App Service app slots should have 'Client Certificates (Incoming client certificates)' enabled" to monitor slots
+- **App Service app slots should have 'Client Certificates (Incoming client certificates)' enabled**
+  - New policy created
+- **App Service apps should use an Azure file share for its content directory**
+  - Update scope of policy to remove slots
+    - Creation of "App Service app slots should use an Azure file share for its content directory" to monitor slots
+- **App Service app slots should use an Azure file share for its content directory**
+  - New policy created 
+- **Function app slots should require FTPS only**
+  - New policy created
+- **App Service app slots should require FTPS only**
+  - New policy created
+- **Function app slots should not have CORS configured to allow every resource to access your apps**
+  - New policy created
+- **App Service app slots should not have CORS configured to allow every resource to access your app**
+  - New policy created
+- **Function apps should only be accessible over HTTPS**
+  - Update scope of policy to remove slots
+    - Creation of "Function app slots should only be accessible over HTTPS" to monitor slots
+  - Add "Deny" effect
+  - Creation of "Configure Function apps to only be accessible over HTTPS" for enforcement of policy
+- **Function app slots should only be accessible over HTTPS**
+  - New policy created
+- **Configure Function apps to only be accessible over HTTPS**
+  - New policy created
+- **Configure Function app slots to only be accessible over HTTPS**
+  - New policy created
+- **App Service apps should use a SKU that supports private link**
+  - Update list of supported SKUs of policy to include the Workflow Standard tier for Logic Apps
+- **Configure App Service apps to use the latest TLS version**
+  - New policy created
+- **Configure Function apps to use the latest TLS version**
+  - New policy created
+- **Configure App Service apps to turn off remote debugging**
+  - New policy created
+- **Configure Function apps to turn off remote debugging**
+  - New policy created
+
 ### August 2022
+
 - **App Service apps should only be accessible over HTTPS**
   - Update scope of policy to remove slots
     - Creation of "App Service app slots should only be accessible over HTTPS" to monitor slots