Skip to content

Commit a964da8

Browse files
authored
Merge pull request #111967 from mgreenegit/patch-12
Refer to new DINE policies for all customers
2 parents 75dc430 + 4b47308 commit a964da8

File tree

3 files changed

+23
-7
lines changed

3 files changed

+23
-7
lines changed

articles/governance/policy/concepts/guest-configuration.md

Lines changed: 13 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -17,25 +17,31 @@ extension and client. The extension, through the client, validates settings such
1717
At this time, most Azure Policy Guest Configuration policies only audit settings inside the machine. They don't
1818
apply configurations. The exception is one built-in policy [referenced below](#applying-configurations-using-guest-configuration).
1919

20+
## Resource provider
21+
22+
Before you can use Guest Configuration, you must register the resource provider. The resource provider is registered
23+
automatically if assignment of a Guest Configuration policy is done through the portal. You can manually register
24+
through the [portal](../../../azure-resource-manager/management/resource-providers-and-types.md#azure-portal), [Azure PowerShell](../../../azure-resource-manager/management/resource-providers-and-types.md#azure-powershell), or [Azure CLI](../../../azure-resource-manager/management/resource-providers-and-types.md#azure-cli).
25+
2026
## Extension and client
2127

2228
To audit settings inside a machine, a [virtual machine
2329
extension](../../../virtual-machines/extensions/overview.md) is enabled. The extension downloads
2430
applicable policy assignment and the corresponding configuration definition.
2531

32+
> [!Important]
33+
> The Guest Configuration extension is required to perform audits in Azure virtual machines.
34+
> To deploy the extension at scale, assign the following policy definitions:
35+
> - Deploy prerequisites to enable Guest Configuration Policy on Windows VMs.
36+
> - Deploy prerequisites to enable Guest Configuration Policy on Linux VMs.
37+
2638
### Limits set on the extension
2739

2840
To limit the extension from impacting applications running inside the machine, the Guest
2941
Configuration isn't allowed to exceed more than 5% of CPU. This limitation exists for
3042
both built-in and custom definitions.
3143

32-
## Register Guest Configuration resource provider
33-
34-
Before you can use Guest Configuration, you must register the resource provider. You can register
35-
through the [portal](../../../azure-resource-manager/management/resource-providers-and-types.md#azure-portal), [Azure PowerShell](../../../azure-resource-manager/management/resource-providers-and-types.md#azure-powershell), or [Azure CLI](../../../azure-resource-manager/management/resource-providers-and-types.md#azure-cli). The resource provider is registered automatically if
36-
assignment of a Guest Configuration policy is done through the portal.
37-
38-
## Validation tools
44+
### Validation tools
3945

4046
Inside the machine, the Guest Configuration client uses local tools to run the audit.
4147

articles/governance/policy/how-to/guest-configuration-create-linux.md

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -25,6 +25,11 @@ non-Azure machine.
2525

2626
> [!IMPORTANT]
2727
> Custom policies with Guest Configuration is a Preview feature.
28+
>
29+
> The Guest Configuration extension is required to perform audits in Azure virtual machines.
30+
> To deploy the extension at scale, assign the following policy definitions:
31+
> - Deploy prerequisites to enable Guest Configuration Policy on Windows VMs.
32+
> - Deploy prerequisites to enable Guest Configuration Policy on Linux VMs.
2833
2934
## Install the PowerShell module
3035

articles/governance/policy/how-to/guest-configuration-create.md

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -26,6 +26,11 @@ non-Azure machine.
2626

2727
> [!IMPORTANT]
2828
> Custom policies with Guest Configuration is a Preview feature.
29+
>
30+
> The Guest Configuration extension is required to perform audits in Azure virtual machines.
31+
> To deploy the extension at scale, assign the following policy definitions:
32+
> - Deploy prerequisites to enable Guest Configuration Policy on Windows VMs.
33+
> - Deploy prerequisites to enable Guest Configuration Policy on Linux VMs.
2934
3035
## Install the PowerShell module
3136

0 commit comments

Comments
 (0)