You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/operator-nexus/howto-use-azure-policy.md
+8-10Lines changed: 8 additions & 10 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -27,7 +27,7 @@ If you're new to Azure Policy, here are some helpful resources that you can use
27
27
28
28
##### Steps for security enforcement
29
29
30
-
1.**Explore built-in policies**: Review built-in policies relevant to Nexus Bare Metal Machine (BMM) resources.
30
+
1.**Explore built-in policies**: Review built-in policies relevant to Nexus Bare Metal Machine (BMM) and Compute Cluster resources.
31
31
2.**Customize policies**: Customize policies to address specific needs of your resources.
32
32
3.**Policy assignment**: Assign policies through the Azure portal, ensuring correct scope.
33
33
4.**Monitoring and compliance**: Regularly monitor policy compliance using Azure tools.
@@ -63,27 +63,25 @@ The Operator Nexus service offers a built-in policy definition that is recommend
63
63
64
64
-[[Preview]: Nexus compute machines should meet security baseline](https://portal.azure.com/#blade/Microsoft_Azure_Policy/PolicyDetailBlade/definitionId/%2Fproviders%2FMicrosoft.Authorization%2FpolicyDefinitions%2Fec2c1bce-5ad3-4b07-bb4f-e041410cd8db)
65
65
66
-
## Use Azure Policy to secure your Nexus Kubernetes cluster
66
+
## Use Azure Policy to secure your Nexus Kubernetes cluster resources
67
67
68
-
Operator Nexus Arc-connected Nexus Kubernetes do not yet have built-in policy definitions available. However, you can create custom policy definitions to meet your organization's security and compliance requirements or utilize built-in policy definitions for AKS clusters.
68
+
The Operator Nexus service offers a built-in policy definition that is recommended to be assigned to your Nexus Kubernetes cluster resources. This policy definition is called **[Preview]: Nexus compute machines should meet security baseline**. This policy definition is used to ensure that your Nexus BMM resources are configured with industry best practice security settings.
69
69
70
-
-[Understand Azure Policy for Kubernetes clusters](../governance/policy/concepts/policy-for-kubernetes.md)
71
-
-[Azure Policy Built-in definitions for AKS](/azure/aks/policy-reference)
70
+
-[[Preview]: Nexus compute cluster should meet security baseline](https://portal.azure.com/#blade/Microsoft_Azure_Policy/PolicyDetailBlade/definitionId/%2Fproviders%2FMicrosoft.Authorization%2FpolicyDefinitions%2Fec2c1bce-5ad3-4b07-bb4f-e041410cd8db) UPDATE LINK!!!
72
71
73
-
### Customizing Policies for Nexus Kubernetes cluster
72
+
### Customizing Policies
74
73
75
-
- Customize policies considering the unique aspects of Nexus Kubernetes clusters, such as network configurations and container security.
74
+
- Customize policies considering the unique aspects of the specific resources.
76
75
- Refer to [Custom policy definitions](../governance/policy/tutorials/create-custom-policy-definition.md) for guidance.
77
76
78
77
## Apply and validate Policies for Nexus resources
79
78
80
-
Whether you are securing Nexus BMM resources or Nexus Kubernetes clusters, the process of applying and validating policies is similar. Here's a generalized approach:
79
+
Whether you are securing Nexus BMM resources or Nexus Kubernetes Clusters, the process of applying and validating policies is similar. Here's a generalized approach:
81
80
82
81
1.**Identify Suitable Policies**:
83
82
84
83
- For Nexus Bare Metal Machine resources, consider the recommended **[Preview]: Nexus compute machines should meet security baseline** policy.
85
-
- For Nexus Kubernetes clusters, explore [built-in AKS policies](/azure/aks/policy-reference) or create custom policy definitions to meet specific security and compliance needs.
86
-
- Review [Azure Policy Built-in definitions](../governance/policy/samples/built-in-policies.md) and [Azure Policy for Kubernetes clusters](../governance/policy/concepts/policy-for-kubernetes.md) for more insights.
84
+
- For Nexus Kubernetes clusters, consider the recommended **[Preview]: Nexus compute cluster should meet security baseline** policy.
0 commit comments