Skip to content

Commit 5224101

Browse files
authored
Refer to new DINE policies for all customers
------- cc: @nitinbps
1 parent ff745e4 commit 5224101

File tree

1 file changed

+13
-7
lines changed

1 file changed

+13
-7
lines changed

articles/governance/policy/concepts/guest-configuration.md

Lines changed: 13 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -17,25 +17,31 @@ extension and client. The extension, through the client, validates settings such
1717
At this time, most Azure Policy Guest Configuration policies only audit settings inside the machine. They don't
1818
apply configurations. The exception is one built-in policy [referenced below](#applying-configurations-using-guest-configuration).
1919

20+
## Resource provider
21+
22+
Before you can use Guest Configuration, you must register the resource provider. The resource provider is registered
23+
automatically if assignment of a Guest Configuration policy is done through the portal. You can manually register
24+
through the [portal](../../../azure-resource-manager/management/resource-providers-and-types.md#azure-portal), [Azure PowerShell](../../../azure-resource-manager/management/resource-providers-and-types.md#azure-powershell), or [Azure CLI](../../../azure-resource-manager/management/resource-providers-and-types.md#azure-cli).
25+
2026
## Extension and client
2127

2228
To audit settings inside a machine, a [virtual machine
2329
extension](../../../virtual-machines/extensions/overview.md) is enabled. The extension downloads
2430
applicable policy assignment and the corresponding configuration definition.
2531

32+
> [!Important]
33+
> The Guest Configuration extension is required to perform audits in Azure virtual machines.
34+
> To deploy the extension at scale, assign the following policy definitions:
35+
> - Deploy prerequisites to enable Guest Configuration Policy on Windows VMs.
36+
> - Deploy prerequisites to enable Guest Configuration Policy on Linux VMs.
37+
2638
### Limits set on the extension
2739

2840
To limit the extension from impacting applications running inside the machine, the Guest
2941
Configuration isn't allowed to exceed more than 5% of CPU. This limitation exists for
3042
both built-in and custom definitions.
3143

32-
## Register Guest Configuration resource provider
33-
34-
Before you can use Guest Configuration, you must register the resource provider. You can register
35-
through the [portal](../../../azure-resource-manager/management/resource-providers-and-types.md#azure-portal), [Azure PowerShell](../../../azure-resource-manager/management/resource-providers-and-types.md#azure-powershell), or [Azure CLI](../../../azure-resource-manager/management/resource-providers-and-types.md#azure-cli). The resource provider is registered automatically if
36-
assignment of a Guest Configuration policy is done through the portal.
37-
38-
## Validation tools
44+
### Validation tools
3945

4046
Inside the machine, the Guest Configuration client uses local tools to run the audit.
4147

0 commit comments

Comments
 (0)