From 9241d989d37564cdc6996ae759d24e117916b734 Mon Sep 17 00:00:00 2001 From: Soniya Mittal Date: Wed, 18 Dec 2024 16:51:24 +0530 Subject: [PATCH 1/3] New bastion recommendations and Cross ref recomms to Specialized workload-AI --- .../Network/bastionHosts/_index.md | 2 +- .../0e57956d-71d9-4a35-bdcf-d7cfd7cd71f4.kql | 1 + .../c9b0c6f6-1f64-4b4b-8165-00770b295dd7.kql | 1 + .../Network/bastionHosts/recommendations.yaml | 35 +++++++++++++++++++ azure-specialized-workloads/ai/_index.md | 2 ++ 5 files changed, 40 insertions(+), 1 deletion(-) create mode 100644 azure-resources/Network/bastionHosts/kql/0e57956d-71d9-4a35-bdcf-d7cfd7cd71f4.kql create mode 100644 azure-resources/Network/bastionHosts/kql/c9b0c6f6-1f64-4b4b-8165-00770b295dd7.kql create mode 100644 azure-resources/Network/bastionHosts/recommendations.yaml diff --git a/azure-resources/Network/bastionHosts/_index.md b/azure-resources/Network/bastionHosts/_index.md index 93a277609..31b6995eb 100644 --- a/azure-resources/Network/bastionHosts/_index.md +++ b/azure-resources/Network/bastionHosts/_index.md @@ -1,7 +1,7 @@ --- title: bastionHosts geekdocCollapseSection: true -geekdocHidden: true +geekdocHidden: false --- {{< azure-resources-recommendationlist name="azure-resources-recommendationlist" >}} diff --git a/azure-resources/Network/bastionHosts/kql/0e57956d-71d9-4a35-bdcf-d7cfd7cd71f4.kql b/azure-resources/Network/bastionHosts/kql/0e57956d-71d9-4a35-bdcf-d7cfd7cd71f4.kql new file mode 100644 index 000000000..fa5cad258 --- /dev/null +++ b/azure-resources/Network/bastionHosts/kql/0e57956d-71d9-4a35-bdcf-d7cfd7cd71f4.kql @@ -0,0 +1 @@ +// cannot-be-validated-with-arg diff --git a/azure-resources/Network/bastionHosts/kql/c9b0c6f6-1f64-4b4b-8165-00770b295dd7.kql b/azure-resources/Network/bastionHosts/kql/c9b0c6f6-1f64-4b4b-8165-00770b295dd7.kql new file mode 100644 index 000000000..fa5cad258 --- /dev/null +++ b/azure-resources/Network/bastionHosts/kql/c9b0c6f6-1f64-4b4b-8165-00770b295dd7.kql @@ -0,0 +1 @@ +// cannot-be-validated-with-arg diff --git a/azure-resources/Network/bastionHosts/recommendations.yaml b/azure-resources/Network/bastionHosts/recommendations.yaml new file mode 100644 index 000000000..fcb66fed2 --- /dev/null +++ b/azure-resources/Network/bastionHosts/recommendations.yaml @@ -0,0 +1,35 @@ +- description: Deploy Azure Bastion across Availability Zones + aprlGuid: c9b0c6f6-1f64-4b4b-8165-00770b295dd7 + recommendationTypeId: null + recommendationControl: HighAvailability + recommendationImpact: High + recommendationResourceType: Microsoft.Network/bastionHosts + recommendationMetadataState: Active + longDescription: | + Azure Bastion provides secure operational access to workload components. By distributing your Bastion resource across multiple availability zones, you can enhance the resiliency and reliability of your production workloads. + potentialBenefits: Provide high availability and resilience to failures + pgVerified: true + automationAvailable: true + tags: null + learnMoreLink: + - name: Reliability in Azure Bastion + url: "https://learn.microsoft.com/en-us/azure/reliability/reliability-bastion" + - name: Deploy Azure Bastion by using specified settings + url: "https://learn.microsoft.com/en-us/azure/bastion/tutorial-create-host-portal" + +- description: Deploy Azure Bastion into the virtual network in secondary Azure region + aprlGuid: 0e57956d-71d9-4a35-bdcf-d7cfd7cd71f4 + recommendationTypeId: null + recommendationControl: DisasterRecovery + recommendationImpact: Medium + recommendationResourceType: Microsoft.Network/bastionHosts + recommendationMetadataState: Active + longDescription: | + Azure Bastion is a single-region service, if the primary region becomes unavailable, the Bastion resource will also be unavailable. To ensure disaster recovery, it is recommended to deploy Azure Bastion into separate virtual networks across different regions. + potentialBenefits: Provides disaster recovery from regional outages + pgVerified: false + automationAvailable: false + tags: null + learnMoreLink: + - name: Multi-region support in Azure bastion + url: "https://learn.microsoft.com/en-us/azure/reliability/reliability-bastion#multi-region-support" diff --git a/azure-specialized-workloads/ai/_index.md b/azure-specialized-workloads/ai/_index.md index dd6bd269a..a7e23c230 100644 --- a/azure-specialized-workloads/ai/_index.md +++ b/azure-specialized-workloads/ai/_index.md @@ -13,6 +13,8 @@ geekdocHidden: false | [Deploy a PAYG instance of the model with provisioned throughput to manage overflow effectively](../../../Azure-Proactive-Resiliency-Library-v2/azure-resources/CognitiveServices/accounts/#deploy-a-PAYG-instance-of-the-model-with-provisioned-throughput-to-manage-overflow-effectively) | CognitiveServices | accounts | | [Ensure that models are deployed using Global batch for large scale processing](../../../Azure-Proactive-Resiliency-Library-v2/azure-resources/CognitiveServices/accounts/#ensure-that-models-are-deployed-using-global-batch-for-large-scale-processing) | CognitiveServices | accounts | | [Ensure AOAI models are deployed using Data Zone Standard for data residency requirements](../../../Azure-Proactive-Resiliency-Library-v2/azure-resources/CognitiveServices/accounts/#ensure-aoai-models-are-deployed-using-data-zone-standard-for-data-residency-requirements) | CognitiveServices | accounts | +| [Deploy Azure Bastion across Availability Zones](../../../Azure-Proactive-Resiliency-Library-v2/azure-resources/Network/bastionHosts/#deploy-azure-bastion-across-availability-zones) | Network | bastionHosts | +| [Deploy Azure Bastion into the virtual network in secondary Azure region](../../../Azure-Proactive-Resiliency-Library-v2/azure-resources/Network/bastionHosts/#deploy-azure-bastion-into-the-virtual-network-in-secondary-azure-region) | Network | bastionHosts |
From 93778ac52c9c181480ad7faee8371e2513a4f878 Mon Sep 17 00:00:00 2001 From: Soniya Mittal Date: Wed, 18 Dec 2024 16:59:52 +0530 Subject: [PATCH 2/3] fixed the recommendation --- .../bastionHosts/kql/c9b0c6f6-1f64-4b4b-8165-00770b295dd7.kql | 2 +- azure-resources/Network/bastionHosts/recommendations.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/azure-resources/Network/bastionHosts/kql/c9b0c6f6-1f64-4b4b-8165-00770b295dd7.kql b/azure-resources/Network/bastionHosts/kql/c9b0c6f6-1f64-4b4b-8165-00770b295dd7.kql index fa5cad258..614a7f9ca 100644 --- a/azure-resources/Network/bastionHosts/kql/c9b0c6f6-1f64-4b4b-8165-00770b295dd7.kql +++ b/azure-resources/Network/bastionHosts/kql/c9b0c6f6-1f64-4b4b-8165-00770b295dd7.kql @@ -1 +1 @@ -// cannot-be-validated-with-arg +// under-development diff --git a/azure-resources/Network/bastionHosts/recommendations.yaml b/azure-resources/Network/bastionHosts/recommendations.yaml index fcb66fed2..e81d1ac18 100644 --- a/azure-resources/Network/bastionHosts/recommendations.yaml +++ b/azure-resources/Network/bastionHosts/recommendations.yaml @@ -27,7 +27,7 @@ longDescription: | Azure Bastion is a single-region service, if the primary region becomes unavailable, the Bastion resource will also be unavailable. To ensure disaster recovery, it is recommended to deploy Azure Bastion into separate virtual networks across different regions. potentialBenefits: Provides disaster recovery from regional outages - pgVerified: false + pgVerified: true automationAvailable: false tags: null learnMoreLink: From 84c701c2af09dd7b5863cfe854cb79851778746f Mon Sep 17 00:00:00 2001 From: Soniya Mittal <71252948+sonmitt@users.noreply.github.com> Date: Thu, 19 Dec 2024 11:05:16 +0530 Subject: [PATCH 3/3] Updated recommendation impact from High to Medium --- azure-resources/Network/bastionHosts/recommendations.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/azure-resources/Network/bastionHosts/recommendations.yaml b/azure-resources/Network/bastionHosts/recommendations.yaml index e81d1ac18..7b81f24a0 100644 --- a/azure-resources/Network/bastionHosts/recommendations.yaml +++ b/azure-resources/Network/bastionHosts/recommendations.yaml @@ -2,7 +2,7 @@ aprlGuid: c9b0c6f6-1f64-4b4b-8165-00770b295dd7 recommendationTypeId: null recommendationControl: HighAvailability - recommendationImpact: High + recommendationImpact: Medium recommendationResourceType: Microsoft.Network/bastionHosts recommendationMetadataState: Active longDescription: |