Skip to content

Commit e948697

Browse files
committed
Address reviewer feedback
1 parent d9e1500 commit e948697

11 files changed

+85
-10
lines changed

learn-pr/advocates/govern-AI-services-Azure-Policy/1-azure-policy-ai-services.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22
uid: learn.govern-ai-services-azure-policy.azure-policy-ai-services
33
title: Azure Policy and AI Services
44
metadata:
5-
title: Azure Policy and AI Services
5+
title: Azure Policy and AI services
66
description: Learn about Azure Policies related to AI services.
77
ms.date: 06/26/2025
88
author: Orin-Thomas

learn-pr/advocates/govern-AI-services-Azure-Policy/3-azure-ai-foundry-azure-machine-learning-policies.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22
uid: learn.govern-ai-services-azure-policy.azure-ai-foundry-azure-machine-learning-policies
33
title: Azure AI Foundry and Azure Machine Learning Policies
44
metadata:
5-
title: Azure AI Foundry and Azure Machine Learning Policies
5+
title: Azure AI Foundry and Azure Machine Learning policies
66
description: Learn about policies related to Azure AI Foundry and Azure Machine Learning.
77
ms.date: 06/26/2025
88
author: Orin-Thomas

learn-pr/advocates/govern-AI-services-Azure-Policy/4-knowledge-check.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22
uid: learn.govern-ai-services-azure-policy.knowledge-check
33
title: Knowledge Check
44
metadata:
5-
title: Knowledge Check
5+
title: Knowledge check
66
description: Check your knowledge.
77
ms.date: 06/26/2025
88
author: Orin-Thomas

learn-pr/advocates/govern-AI-services-Azure-Policy/includes/1-azure-policy-ai-services.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -10,11 +10,11 @@ As an AI workload operations administrator, Azure it's your responsibility to en
1010
- Azure AI Foundry: Azure AI Foundry is a cloud service for the full lifecycle of application development. With AI Foundry developers can explore, build, test, and deploy AI tools and ML models.
1111
- Azure Machine Learning: Azure Machine Learning is a cloud service for accelerating and managing the machine learning (ML) project lifecycle.
1212

13-
Policy definitions or initiatives have a scope to which they're applied to. When you apply the scope of a Resource Group (or another scope) to a definition or initiative, the JSON file for the underlying policy definition targets resources based on the resource type.
13+
Policy definitions or initiatives have a scope to which they're applied. When you apply the scope of a Resource Group (or another scope) to a definition or initiative, the JSON file for the underlying policy definition targets resources based on the resource type.
1414

1515
Here's an example definition for an audit policy to enable the usage of Private Endpoint for Azure AI services on GitHub:
1616

17-
![A screenshot of the Azure portal, with an Azure AI services policy related to private endpoints displayed.](../media/ai-services-policy.svg)
17+
[![A screenshot of the Azure portal, with an Azure AI services policy related to private endpoints displayed.](../media/ai-services-policy.svg)](../media/ai-services-policy-big.svg#lightbox)
1818

1919
This definition runs under its scope against any resource of type Microsoft.CognitiveServices. When you analyze the resource ID structure of a service such as Azure OpenAI, you can see the resource type: /subscriptions/\<subscriptionID>/resourceGroups/\<RG-name>/providers/Microsoft.CognitiveServices/accounts/ContosoAIDemo
2020

@@ -25,7 +25,7 @@ The result is this resource (Azure OpenAI) will be affected by the policy defini
2525
2626
Here's an example definition for an audit policy to deploy a private endpoint to Azure Machine Learning:
2727

28-
![A screenshot of the Azure portal, with an Azure Machine Learninga policy related to private endpoints displayed.](../media/machine-learning-policy.svg)
28+
[![A screenshot of the Azure portal, with an Azure Machine Learning policy related to private endpoints displayed.](../media/machine-learning-policy.svg)](../media/machine-learning-policy-big.svg#lightbox)
2929

3030
The policy definition targets resources of type "Microsoft.MachineLearningServices". When you analyze the resource ID structure of BOTH Azure Machine Learning and Azure AI Foundry, you can see the same structure:
3131

learn-pr/advocates/govern-AI-services-Azure-Policy/includes/2-assess-ai-workload-compliance-with-azure-policy.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@ To apply a policy definition to an Azure AI service:
1616
1. Select the policy Azure AI Services resources should restrict network access.
1717
1. On the policy page, scroll down to check which resource is in noncompliant state:
1818

19-
- ![A screenshot of the Azure portal showing the results of a policy assessment.](../media/policy-assessment.svg)
19+
[![A screenshot of the Azure portal showing the results of a policy assessment](../media/policy-assessment.svg)](../media/policy-assessment-big.svg#lightbox)
2020

2121
Azure Policy evaluates the state of a resource to enforce organizational standards and to assess compliance. You can apply the following list of built-in policies to Azure AI services directly from the Azure portal:
2222

learn-pr/advocates/govern-AI-services-Azure-Policy/includes/3-azure-ai-foundry-azure-machine-learning-policies.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -20,7 +20,7 @@ While cross-compatible, Microsoft provides built-in policies for both services.
2020
| **Configure Azure Machine Learning workspace to use private DNS zones** | Use private DNS zones to override the DNS resolution for a private endpoint. A private DNS zone links to your virtual network to resolve to Azure Machine Learning workspaces. |
2121
| **Configure Azure Machine Learning Workspaces to disable public network access** | Disable public network access for Azure Machine Learning Workspaces so that your workspaces aren't accessible over the public internet. This helps protect the workspaces against data leakage risks. You can control exposure of your workspaces by creating private endpoints instead. |
2222
| **Configure Azure Machine Learning workspaces with private endpoints** | Private endpoints connect your virtual network to Azure services without a public IP address at the source or destination. By mapping private endpoints to your Azure Machine Learning workspace, you can reduce data leakage risks. |
23-
| **Configure diagnostic settings for Azure Machine Learning Workspaces to Log Analytics workspace** | Deploys the diagnostic settings for Azure Machine Learning Workspaces to stream resource logs to a Log Analytics Workspace when any Azure Machine Learning Workspace which is missing this diagnostic settings is created or updated. |
23+
| **Configure diagnostic settings for Azure Machine Learning Workspaces to Log Analytics workspace** | Deploys the diagnostic settings for Azure Machine Learning Workspaces to stream resource logs to a Log Analytics Workspace when any Azure Machine Learning Workspace which is missing these diagnostic settings is created or updated. |
2424
| **Resource logs in Azure Machine Learning Workspaces should be enabled** | Resource logs enable recreating activity trails to use for investigation purposes when a security incident occurs or when your network is compromised. |
2525

2626
Below is the list of built-in policies you can apply to Azure AI Foundry directly from the Azure portal:
Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
In this module, you learned how to set up policy and initiative assignments to Azure AI services, Azure AI Foundry, and Azure Machine Learning and how to identify noncompliant AI resources in Azure.
22

3-
## Learn more:
3+
## Learn more
44

55
- [Create a custom policy definition.](/azure/governance/policy/tutorials/create-custom-policy-definition)
66
- [Azure Policy built-in policy definitions for Azure AI services](/azure/ai-services/policy-reference)

learn-pr/advocates/govern-AI-services-Azure-Policy/index.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@ metadata:
99
ms.service: azure-policy
1010
ms.topic: module
1111
ms.collection: ce-advocates-ai-copilot
12-
title: Govern AI Services with Azure Policy
12+
title: Govern AI services with Azure Policy
1313
summary: TBD
1414
abstract: |
1515
After completing this module, you'll be able to:

learn-pr/advocates/govern-AI-services-Azure-Policy/media/ai-services-policy-big.svg

Lines changed: 25 additions & 0 deletions
Loading

learn-pr/advocates/govern-AI-services-Azure-Policy/media/machine-learning-policy-big.svg

Lines changed: 25 additions & 0 deletions
Loading

0 commit comments

Comments
 (0)