Skip to content

Commit d59dddb

Browse files
committed
Add compute cluster policy updates
1 parent b34f9d7 commit d59dddb

File tree

1 file changed

+8
-10
lines changed

1 file changed

+8
-10
lines changed

articles/operator-nexus/howto-use-azure-policy.md

Lines changed: 8 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,7 @@ If you're new to Azure Policy, here are some helpful resources that you can use
2727

2828
##### Steps for security enforcement
2929

30-
1. **Explore built-in policies**: Review built-in policies relevant to Nexus Bare Metal Machine (BMM) resources.
30+
1. **Explore built-in policies**: Review built-in policies relevant to Nexus Bare Metal Machine (BMM) and Compute Cluster resources.
3131
2. **Customize policies**: Customize policies to address specific needs of your resources.
3232
3. **Policy assignment**: Assign policies through the Azure portal, ensuring correct scope.
3333
4. **Monitoring and compliance**: Regularly monitor policy compliance using Azure tools.
@@ -63,27 +63,25 @@ The Operator Nexus service offers a built-in policy definition that is recommend
6363

6464
- [[Preview]: Nexus compute machines should meet security baseline](https://portal.azure.com/#blade/Microsoft_Azure_Policy/PolicyDetailBlade/definitionId/%2Fproviders%2FMicrosoft.Authorization%2FpolicyDefinitions%2Fec2c1bce-5ad3-4b07-bb4f-e041410cd8db)
6565

66-
## Use Azure Policy to secure your Nexus Kubernetes cluster
66+
## Use Azure Policy to secure your Nexus Kubernetes cluster resources
6767

68-
Operator Nexus Arc-connected Nexus Kubernetes do not yet have built-in policy definitions available. However, you can create custom policy definitions to meet your organization's security and compliance requirements or utilize built-in policy definitions for AKS clusters.
68+
The Operator Nexus service offers a built-in policy definition that is recommended to be assigned to your Nexus Kubernetes cluster resources. This policy definition is called **[Preview]: Nexus compute machines should meet security baseline**. This policy definition is used to ensure that your Nexus BMM resources are configured with industry best practice security settings.
6969

70-
- [Understand Azure Policy for Kubernetes clusters](../governance/policy/concepts/policy-for-kubernetes.md)
71-
- [Azure Policy Built-in definitions for AKS](/azure/aks/policy-reference)
70+
- [[Preview]: Nexus compute cluster should meet security baseline](https://portal.azure.com/#blade/Microsoft_Azure_Policy/PolicyDetailBlade/definitionId/%2Fproviders%2FMicrosoft.Authorization%2FpolicyDefinitions%2Fec2c1bce-5ad3-4b07-bb4f-e041410cd8db) UPDATE LINK!!!
7271

73-
### Customizing Policies for Nexus Kubernetes cluster
72+
### Customizing Policies
7473

75-
- Customize policies considering the unique aspects of Nexus Kubernetes clusters, such as network configurations and container security.
74+
- Customize policies considering the unique aspects of the specific resources.
7675
- Refer to [Custom policy definitions](../governance/policy/tutorials/create-custom-policy-definition.md) for guidance.
7776

7877
## Apply and validate Policies for Nexus resources
7978

80-
Whether you are securing Nexus BMM resources or Nexus Kubernetes clusters, the process of applying and validating policies is similar. Here's a generalized approach:
79+
Whether you are securing Nexus BMM resources or Nexus Kubernetes Clusters, the process of applying and validating policies is similar. Here's a generalized approach:
8180

8281
1. **Identify Suitable Policies**:
8382

8483
- For Nexus Bare Metal Machine resources, consider the recommended **[Preview]: Nexus compute machines should meet security baseline** policy.
85-
- For Nexus Kubernetes clusters, explore [built-in AKS policies](/azure/aks/policy-reference) or create custom policy definitions to meet specific security and compliance needs.
86-
- Review [Azure Policy Built-in definitions](../governance/policy/samples/built-in-policies.md) and [Azure Policy for Kubernetes clusters](../governance/policy/concepts/policy-for-kubernetes.md) for more insights.
84+
- For Nexus Kubernetes clusters, consider the recommended **[Preview]: Nexus compute cluster should meet security baseline** policy.
8785

8886
2. **Assign Policies**:
8987

0 commit comments

Comments
 (0)