Path	Lines of Code
CODE_OF_CONDUCT.md	6
CONTRIBUTING.md	24
README.md	19
SECURITY.md	24
SUPPORT.md	7
platform/alz/README.md	708
platform/alz/_README.md	701
platform/alz/alz_library_metadata.json	7
platform/alz/alz_policy_default_values.json	197
platform/alz/archetype_definitions/connectivity.alz_archetype_definition.json	10
platform/alz/archetype_definitions/corp.alz_archetype_definition.json	14
platform/alz/archetype_definitions/decommissioned.alz_archetype_definition.json	10
platform/alz/archetype_definitions/identity.alz_archetype_definition.json	13
platform/alz/archetype_definitions/landing_zones.alz_archetype_definition.json	34
platform/alz/archetype_definitions/management.alz_archetype_definition.json	8
platform/alz/archetype_definitions/online.alz_archetype_definition.json	8
platform/alz/archetype_definitions/platform.alz_archetype_definition.json	21
platform/alz/archetype_definitions/root.alz_archetype_definition.json	239
platform/alz/archetype_definitions/sandbox.alz_archetype_definition.json	10
platform/alz/architecture_definitions/alz.alz_architecture_definition.json	96
platform/alz/policy_assignments/Audit-AppGW-WAF.alz_policy_assignment.json	26
platform/alz/policy_assignments/Audit-PeDnsZones.alz_policy_assignment.json	93
platform/alz/policy_assignments/Audit-ResourceRGLocation.alz_policy_assignment.json	22
platform/alz/policy_assignments/Audit-TrustedLaunch.alz_policy_assignment.json	25
platform/alz/policy_assignments/Audit-UnusedResources.alz_policy_assignment.json	31
platform/alz/policy_assignments/Audit-ZoneResiliency.alz_policy_assignment.json	29
platform/alz/policy_assignments/Deny-Classic-Resources.alz_policy_assignment.json	87
platform/alz/policy_assignments/Deny-HybridNetworking.alz_policy_assignment.json	39
platform/alz/policy_assignments/Deny-IP-forwarding.alz_policy_assignment.json	22
platform/alz/policy_assignments/Deny-MgmtPorts-Internet.alz_policy_assignment.json	21
platform/alz/policy_assignments/Deny-Priv-Esc-AKS.alz_policy_assignment.json	21
platform/alz/policy_assignments/Deny-Privileged-AKS.alz_policy_assignment.json	21
platform/alz/policy_assignments/Deny-Public-Endpoints.alz_policy_assignment.json	21
platform/alz/policy_assignments/Deny-Public-IP-On-NIC.alz_policy_assignment.json	22
platform/alz/policy_assignments/Deny-Public-IP.alz_policy_assignment.json	31
platform/alz/policy_assignments/Deny-Storage-http.alz_policy_assignment.json	26
platform/alz/policy_assignments/Deny-Subnet-Without-Nsg.alz_policy_assignment.json	21
platform/alz/policy_assignments/Deny-UnmanagedDisk.alz_policy_assignment.json	28
platform/alz/policy_assignments/DenyAction-DeleteUAMIAMA.alz_policy_assignment.json	26
platform/alz/policy_assignments/Deploy-ASC-Monitoring.alz_policy_assignment.json	25
platform/alz/policy_assignments/Deploy-AzActivity-Log.alz_policy_assignment.json	32
platform/alz/policy_assignments/Deploy-AzSqlDb-Auditing.alz_policy_assignment.json	29
platform/alz/policy_assignments/Deploy-Diag-LogsCat.alz_policy_assignment.json	29
platform/alz/policy_assignments/Deploy-MDEndpoints.alz_policy_assignment.json	38
platform/alz/policy_assignments/Deploy-MDEndpointsAMA.alz_policy_assignment.json	25
platform/alz/policy_assignments/Deploy-MDFC-Config-H224.alz_policy_assignment.json	73
platform/alz/policy_assignments/Deploy-MDFC-DefSQL-AMA.alz_policy_assignment.json	47
platform/alz/policy_assignments/Deploy-MDFC-OssDb.alz_policy_assignment.json	25
platform/alz/policy_assignments/Deploy-MDFC-SqlAtp.alz_policy_assignment.json	25
platform/alz/policy_assignments/Deploy-Private-DNS-Zones.alz_policy_assignment.json	226
platform/alz/policy_assignments/Deploy-SQL-TDE.alz_policy_assignment.json	25
platform/alz/policy_assignments/Deploy-SQL-Threat.alz_policy_assignment.json	25
platform/alz/policy_assignments/Deploy-VM-Backup.alz_policy_assignment.json	25
platform/alz/policy_assignments/Deploy-VM-ChangeTrack.alz_policy_assignment.json	41
platform/alz/policy_assignments/Deploy-VM-Monitoring.alz_policy_assignment.json	44
platform/alz/policy_assignments/Deploy-VMSS-ChangeTrack.alz_policy_assignment.json	41
platform/alz/policy_assignments/Deploy-VMSS-Monitoring.alz_policy_assignment.json	44
platform/alz/policy_assignments/Deploy-vmArc-ChangeTrack.alz_policy_assignment.json	32
platform/alz/policy_assignments/Deploy-vmHybr-Monitoring.alz_policy_assignment.json	32
platform/alz/policy_assignments/Enable-AUM-CheckUpdates.alz_policy_assignment.json	37
platform/alz/policy_assignments/Enable-DDoS-VNET.alz_policy_assignment.json	27
platform/alz/policy_assignments/Enforce-ACSB.alz_policy_assignment.json	24
platform/alz/policy_assignments/Enforce-AKS-HTTPS.alz_policy_assignment.json	21
platform/alz/policy_assignments/Enforce-ALZ-Decomm.alz_policy_assignment.json	36
platform/alz/policy_assignments/Enforce-ALZ-Sandbox.alz_policy_assignment.json	35
platform/alz/policy_assignments/Enforce-ASR.alz_policy_assignment.json	21
platform/alz/policy_assignments/Enforce-GR-KeyVault.alz_policy_assignment.json	16
platform/alz/policy_assignments/Enforce-Subnet-Private.alz_policy_assignment.json	26
platform/alz/policy_assignments/Enforce-TLS-SSL-H224.alz_policy_assignment.json	24
platform/alz/policy_assignments/Enforce-TLS-SSL-Q225.alz_policy_assignment.json	24
platform/alz/policy_definitions/Append-AppService-httpsonly.alz_policy_definition.json	57
platform/alz/policy_definitions/Append-AppService-latestTLS.alz_policy_definition.json	71
platform/alz/policy_definitions/Append-KV-SoftDelete.alz_policy_definition.json	48
platform/alz/policy_definitions/Append-Redis-disableNonSslPort.alz_policy_definition.json	61
platform/alz/policy_definitions/Append-Redis-sslEnforcement.alz_policy_definition.json	74
platform/alz/policy_definitions/Audit-AzureHybridBenefit.alz_policy_definition.json	86
platform/alz/policy_definitions/Audit-Disks-UnusedResourcesCostOptimization.alz_policy_definition.json	67
platform/alz/policy_definitions/Audit-MachineLearning-PrivateEndpointId.alz_policy_definition.json	62
platform/alz/policy_definitions/Audit-PrivateLinkDnsZones.alz_policy_definition.json	125
platform/alz/policy_definitions/Audit-PublicIpAddresses-UnusedResourcesCostOptimization.alz_policy_definition.json	87
platform/alz/policy_definitions/Audit-ServerFarms-UnusedResourcesCostOptimization.alz_policy_definition.json	55
platform/alz/policy_definitions/Audit-Tags-Mandatory-Rg.alz_policy_definition.json	89
platform/alz/policy_definitions/Audit-Tags-Mandatory.alz_policy_definition.json	64
platform/alz/policy_definitions/Deny-AA-child-resources.alz_policy_definition.json	54
platform/alz/policy_definitions/Deny-APIM-TLS.alz_policy_definition.json	68
platform/alz/policy_definitions/Deny-AppGW-Without-WAF.alz_policy_definition.json	52
platform/alz/policy_definitions/Deny-AppGw-Without-Tls.alz_policy_definition.json	76
platform/alz/policy_definitions/Deny-AppService-without-BYOC.alz_policy_definition.json	60
platform/alz/policy_definitions/Deny-AppServiceApiApp-http.alz_policy_definition.json	56
platform/alz/policy_definitions/Deny-AppServiceFunctionApp-http.alz_policy_definition.json	56
platform/alz/policy_definitions/Deny-AppServiceWebApp-http.alz_policy_definition.json	56
platform/alz/policy_definitions/Deny-AzFw-Without-Policy.alz_policy_definition.json	52
platform/alz/policy_definitions/Deny-CognitiveServices-NetworkAcls.alz_policy_definition.json	64
platform/alz/policy_definitions/Deny-CognitiveServices-Resource-Kinds.alz_policy_definition.json	93
platform/alz/policy_definitions/Deny-CognitiveServices-RestrictOutboundNetworkAccess.alz_policy_definition.json	60
platform/alz/policy_definitions/Deny-Databricks-NoPublicIp.alz_policy_definition.json	50
platform/alz/policy_definitions/Deny-Databricks-Sku.alz_policy_definition.json	50
platform/alz/policy_definitions/Deny-Databricks-VirtualNetwork.alz_policy_definition.json	62
platform/alz/policy_definitions/Deny-EH-Premium-CMK.alz_policy_definition.json	58
platform/alz/policy_definitions/Deny-EH-minTLS.alz_policy_definition.json	68
platform/alz/policy_definitions/Deny-FileServices-InsecureAuth.alz_policy_definition.json	64
platform/alz/policy_definitions/Deny-FileServices-InsecureKerberos.alz_policy_definition.json	64
platform/alz/policy_definitions/Deny-FileServices-InsecureSmbChannel.alz_policy_definition.json	65
platform/alz/policy_definitions/Deny-FileServices-InsecureSmbVersions.alz_policy_definition.json	67
platform/alz/policy_definitions/Deny-LogicApp-Public-Network.alz_policy_definition.json	64
platform/alz/policy_definitions/Deny-LogicApps-Without-Https.alz_policy_definition.json	64
platform/alz/policy_definitions/Deny-MachineLearning-Aks.alz_policy_definition.json	62
platform/alz/policy_definitions/Deny-MachineLearning-Compute-SubnetId.alz_policy_definition.json	65
platform/alz/policy_definitions/Deny-MachineLearning-Compute-VmSize.alz_policy_definition.json	146
platform/alz/policy_definitions/Deny-MachineLearning-ComputeCluster-RemoteLoginPortPublicAccess.alz_policy_definition.json	62
platform/alz/policy_definitions/Deny-MachineLearning-ComputeCluster-Scale.alz_policy_definition.json	90
platform/alz/policy_definitions/Deny-MachineLearning-HbiWorkspace.alz_policy_definition.json	58
platform/alz/policy_definitions/Deny-MachineLearning-PublicAccessWhenBehindVnet.alz_policy_definition.json	58
platform/alz/policy_definitions/Deny-MachineLearning-PublicNetworkAccess.alz_policy_definition.json	52
platform/alz/policy_definitions/Deny-MgmtPorts-From-Internet.alz_policy_definition.json	253
platform/alz/policy_definitions/Deny-MySql-http.alz_policy_definition.json	78
platform/alz/policy_definitions/Deny-PostgreSql-http.alz_policy_definition.json	78
platform/alz/policy_definitions/Deny-Private-DNS-Zones.alz_policy_definition.json	44
platform/alz/policy_definitions/Deny-PublicEndpoint-MariaDB.alz_policy_definition.json	54
platform/alz/policy_definitions/Deny-PublicIP.alz_policy_definition.json	46
platform/alz/policy_definitions/Deny-RDP-From-Internet.alz_policy_definition.json	124
platform/alz/policy_definitions/Deny-Redis-http.alz_policy_definition.json	73
platform/alz/policy_definitions/Deny-Service-Endpoints.alz_policy_definition.json	58
platform/alz/policy_definitions/Deny-Sql-minTLS.alz_policy_definition.json	73
platform/alz/policy_definitions/Deny-SqlMi-minTLS.alz_policy_definition.json	73
platform/alz/policy_definitions/Deny-Storage-ContainerDeleteRetentionPolicy.alz_policy_definition.json	72
platform/alz/policy_definitions/Deny-Storage-CopyScope.alz_policy_definition.json	72
platform/alz/policy_definitions/Deny-Storage-CorsRules.alz_policy_definition.json	100
platform/alz/policy_definitions/Deny-Storage-LocalUser.alz_policy_definition.json	60
platform/alz/policy_definitions/Deny-Storage-NetworkAclsBypass.alz_policy_definition.json	88
platform/alz/policy_definitions/Deny-Storage-NetworkAclsVirtualNetworkRules.alz_policy_definition.json	54
platform/alz/policy_definitions/Deny-Storage-ResourceAccessRulesResourceId.alz_policy_definition.json	64
platform/alz/policy_definitions/Deny-Storage-ResourceAccessRulesTenantId.alz_policy_definition.json	58
platform/alz/policy_definitions/Deny-Storage-SFTP.alz_policy_definition.json	52
platform/alz/policy_definitions/Deny-Storage-ServicesEncryption.alz_policy_definition.json	100
platform/alz/policy_definitions/Deny-Storage-minTLS.alz_policy_definition.json	91
platform/alz/policy_definitions/Deny-StorageAccount-CustomDomain.alz_policy_definition.json	60
platform/alz/policy_definitions/Deny-Subnet-Without-Nsg.alz_policy_definition.json	98
platform/alz/policy_definitions/Deny-Subnet-Without-Penp.alz_policy_definition.json	99
platform/alz/policy_definitions/Deny-Subnet-Without-Udr.alz_policy_definition.json	96
platform/alz/policy_definitions/Deny-UDR-With-Specific-NextHop.alz_policy_definition.json	85
platform/alz/policy_definitions/Deny-VNET-Peer-Cross-Sub.alz_policy_definition.json	68
platform/alz/policy_definitions/Deny-VNET-Peering-To-Non-Approved-VNETs.alz_policy_definition.json	86
platform/alz/policy_definitions/Deny-VNet-Peering.alz_policy_definition.json	44
platform/alz/policy_definitions/DenyAction-ActivityLogs.alz_policy_definition.json	36
platform/alz/policy_definitions/DenyAction-DeleteResources.alz_policy_definition.json	70
platform/alz/policy_definitions/DenyAction-DiagnosticLogs.alz_policy_definition.json	36
platform/alz/policy_definitions/Deploy-ASC-SecurityContacts.alz_policy_definition.json	148
platform/alz/policy_definitions/Deploy-Budget.alz_policy_definition.json	236
platform/alz/policy_definitions/Deploy-Custom-Route-Table.alz_policy_definition.json	211
platform/alz/policy_definitions/Deploy-DDoSProtection.alz_policy_definition.json	148
platform/alz/policy_definitions/Deploy-Diagnostics-AA.alz_policy_definition.json	200
platform/alz/policy_definitions/Deploy-Diagnostics-ACI.alz_policy_definition.json	161
platform/alz/policy_definitions/Deploy-Diagnostics-ACR.alz_policy_definition.json	192
platform/alz/policy_definitions/Deploy-Diagnostics-APIMgmt.alz_policy_definition.json	211
platform/alz/policy_definitions/Deploy-Diagnostics-AVDScalingPlans.alz_policy_definition.json	153
platform/alz/policy_definitions/Deploy-Diagnostics-AnalysisService.alz_policy_definition.json	192
platform/alz/policy_definitions/Deploy-Diagnostics-ApiForFHIR.alz_policy_definition.json	188
platform/alz/policy_definitions/Deploy-Diagnostics-ApplicationGateway.alz_policy_definition.json	196
platform/alz/policy_definitions/Deploy-Diagnostics-Bastion.alz_policy_definition.json	188
platform/alz/policy_definitions/Deploy-Diagnostics-CDNEndpoints.alz_policy_definition.json	156
platform/alz/policy_definitions/Deploy-Diagnostics-CognitiveServices.alz_policy_definition.json	196
platform/alz/policy_definitions/Deploy-Diagnostics-CosmosDB.alz_policy_definition.json	220
platform/alz/policy_definitions/Deploy-Diagnostics-DLAnalytics.alz_policy_definition.json	192
platform/alz/policy_definitions/Deploy-Diagnostics-DataExplorerCluster.alz_policy_definition.json	212
platform/alz/policy_definitions/Deploy-Diagnostics-DataFactory.alz_policy_definition.json	228
platform/alz/policy_definitions/Deploy-Diagnostics-Databricks.alz_policy_definition.json	271
platform/alz/policy_definitions/Deploy-Diagnostics-EventGridSub.alz_policy_definition.json	161
platform/alz/policy_definitions/Deploy-Diagnostics-EventGridSystemTopic.alz_policy_definition.json	188
platform/alz/policy_definitions/Deploy-Diagnostics-EventGridTopic.alz_policy_definition.json	196
platform/alz/policy_definitions/Deploy-Diagnostics-ExpressRoute.alz_policy_definition.json	188
platform/alz/policy_definitions/Deploy-Diagnostics-Firewall.alz_policy_definition.json	263
platform/alz/policy_definitions/Deploy-Diagnostics-FrontDoor.alz_policy_definition.json	192
platform/alz/policy_definitions/Deploy-Diagnostics-Function.alz_policy_definition.json	196
platform/alz/policy_definitions/Deploy-Diagnostics-HDInsight.alz_policy_definition.json	161
platform/alz/policy_definitions/Deploy-Diagnostics-LoadBalancer.alz_policy_definition.json	192
platform/alz/policy_definitions/Deploy-Diagnostics-LogAnalytics.alz_policy_definition.json	188
platform/alz/policy_definitions/Deploy-Diagnostics-LogicAppsISE.alz_policy_definition.json	156
platform/alz/policy_definitions/Deploy-Diagnostics-MariaDB.alz_policy_definition.json	192
platform/alz/policy_definitions/Deploy-Diagnostics-MediaService.alz_policy_definition.json	188
platform/alz/policy_definitions/Deploy-Diagnostics-MlWorkspace.alz_policy_definition.json	287
platform/alz/policy_definitions/Deploy-Diagnostics-MySQL.alz_policy_definition.json	192
platform/alz/policy_definitions/Deploy-Diagnostics-NIC.alz_policy_definition.json	160
platform/alz/policy_definitions/Deploy-Diagnostics-NetworkSecurityGroups.alz_policy_definition.json	160
platform/alz/policy_definitions/Deploy-Diagnostics-PostgreSQL.alz_policy_definition.json	239
platform/alz/policy_definitions/Deploy-Diagnostics-PowerBIEmbedded.alz_policy_definition.json	188
platform/alz/policy_definitions/Deploy-Diagnostics-RedisCache.alz_policy_definition.json	161
platform/alz/policy_definitions/Deploy-Diagnostics-Relay.alz_policy_definition.json	188
platform/alz/policy_definitions/Deploy-Diagnostics-SQLElasticPools.alz_policy_definition.json	161
platform/alz/policy_definitions/Deploy-Diagnostics-SQLMI.alz_policy_definition.json	163
platform/alz/policy_definitions/Deploy-Diagnostics-SignalR.alz_policy_definition.json	184
platform/alz/policy_definitions/Deploy-Diagnostics-TimeSeriesInsights.alz_policy_definition.json	192
platform/alz/policy_definitions/Deploy-Diagnostics-TrafficManager.alz_policy_definition.json	188
platform/alz/policy_definitions/Deploy-Diagnostics-VM.alz_policy_definition.json	160
platform/alz/policy_definitions/Deploy-Diagnostics-VMSS.alz_policy_definition.json	160
platform/alz/policy_definitions/Deploy-Diagnostics-VNetGW.alz_policy_definition.json	204
platform/alz/policy_definitions/Deploy-Diagnostics-VWanS2SVPNGW.alz_policy_definition.json	200
platform/alz/policy_definitions/Deploy-Diagnostics-VirtualNetwork.alz_policy_definition.json	187
platform/alz/policy_definitions/Deploy-Diagnostics-WVDAppGroup.alz_policy_definition.json	163
platform/alz/policy_definitions/Deploy-Diagnostics-WVDHostPools.alz_policy_definition.json	187
platform/alz/policy_definitions/Deploy-Diagnostics-WVDWorkspace.alz_policy_definition.json	167
platform/alz/policy_definitions/Deploy-Diagnostics-WebServerFarm.alz_policy_definition.json	161
platform/alz/policy_definitions/Deploy-Diagnostics-Website.alz_policy_definition.json	265
platform/alz/policy_definitions/Deploy-Diagnostics-iotHub.alz_policy_definition.json	240
platform/alz/policy_definitions/Deploy-FirewallPolicy.alz_policy_definition.json	165
platform/alz/policy_definitions/Deploy-LogicApp-TLS.alz_policy_definition.json	93
platform/alz/policy_definitions/Deploy-MDFC-Arc-SQL-DCR-Association.alz_policy_definition.json	200
platform/alz/policy_definitions/Deploy-MDFC-Arc-Sql-DefenderSQL-DCR.alz_policy_definition.json	404
platform/alz/policy_definitions/Deploy-MDFC-SQL-AMA.alz_policy_definition.json	175
platform/alz/policy_definitions/Deploy-MDFC-SQL-DefenderSQL-DCR.alz_policy_definition.json	463
platform/alz/policy_definitions/Deploy-MDFC-SQL-DefenderSQL.alz_policy_definition.json	240
platform/alz/policy_definitions/Deploy-MySQL-sslEnforcement.alz_policy_definition.json	136
platform/alz/policy_definitions/Deploy-Nsg-FlowLogs-to-LA.alz_policy_definition.json	233
platform/alz/policy_definitions/Deploy-Nsg-FlowLogs.alz_policy_definition.json	195
platform/alz/policy_definitions/Deploy-PostgreSQL-sslEnforcement.alz_policy_definition.json	137
platform/alz/policy_definitions/Deploy-Private-DNS-Generic.alz_policy_definition.json	165
platform/alz/policy_definitions/Deploy-SQL-minTLS.alz_policy_definition.json	123
platform/alz/policy_definitions/Deploy-Sql-AuditingSettings.alz_policy_definition.json	123
platform/alz/policy_definitions/Deploy-Sql-SecurityAlertPolicies.alz_policy_definition.json	121
platform/alz/policy_definitions/Deploy-Sql-Tde.alz_policy_definition.json	124
platform/alz/policy_definitions/Deploy-Sql-vulnerabilityAssessments.alz_policy_definition.json	143
platform/alz/policy_definitions/Deploy-Sql-vulnerabilityAssessments_20230706.alz_policy_definition.json	146
platform/alz/policy_definitions/Deploy-SqlMi-minTLS.alz_policy_definition.json	124
platform/alz/policy_definitions/Deploy-Storage-sslEnforcement.alz_policy_definition.json	136
platform/alz/policy_definitions/Deploy-UserAssignedManagedIdentity-VMInsights.alz_policy_definition.json	403
platform/alz/policy_definitions/Deploy-VNET-HubSpoke.alz_policy_definition.json	307
platform/alz/policy_definitions/Deploy-Vm-autoShutdown.alz_policy_definition.json	194
platform/alz/policy_definitions/Deploy-Windows-DomainJoin.alz_policy_definition.json	259
platform/alz/policy_definitions/Modify-NSG.alz_policy_definition.json	127
platform/alz/policy_definitions/Modify-UDR.alz_policy_definition.json	101
platform/alz/policy_set_definitions/Audit-TrustedLaunch.alz_policy_set_definition.json	55
platform/alz/policy_set_definitions/Audit-UnusedResourcesCostOptimization.alz_policy_set_definition.json	99
platform/alz/policy_set_definitions/Deny-PublicPaaSEndpoints.alz_policy_set_definition.json	970
platform/alz/policy_set_definitions/DenyAction-DeleteProtection.alz_policy_set_definition.json	34
platform/alz/policy_set_definitions/Deploy-AUM-CheckUpdates.alz_policy_set_definition.json	150
platform/alz/policy_set_definitions/Deploy-Diagnostics-LogAnalytics.alz_policy_set_definition.json	1968
platform/alz/policy_set_definitions/Deploy-MDFC-Config.alz_policy_set_definition.json	446
platform/alz/policy_set_definitions/Deploy-MDFC-Config_20240319.alz_policy_set_definition.json	432
platform/alz/policy_set_definitions/Deploy-MDFC-DefenderSQL-AMA.alz_policy_set_definition.json	236
platform/alz/policy_set_definitions/Deploy-Private-DNS-Zones.alz_policy_set_definition.json	1674
platform/alz/policy_set_definitions/Deploy-Sql-Security.alz_policy_set_definition.json	133
platform/alz/policy_set_definitions/Deploy-Sql-Security_20240529.alz_policy_set_definition.json	132
platform/alz/policy_set_definitions/Enforce-ACSB.alz_policy_set_definition.json	89
platform/alz/policy_set_definitions/Enforce-ALZ-Decomm.alz_policy_set_definition.json	48
platform/alz/policy_set_definitions/Enforce-ALZ-Sandbox.alz_policy_set_definition.json	81
platform/alz/policy_set_definitions/Enforce-Backup.alz_policy_set_definition.json	131
platform/alz/policy_set_definitions/Enforce-EncryptTransit.alz_policy_set_definition.json	640
platform/alz/policy_set_definitions/Enforce-EncryptTransit_20240509.alz_policy_set_definition.json	937
platform/alz/policy_set_definitions/Enforce-EncryptTransit_20241211.alz_policy_set_definition.json	916
platform/alz/policy_set_definitions/Enforce-Encryption-CMK_20250218.alz_policy_set_definition.json	647
platform/alz/policy_set_definitions/Enforce-Guardrails-APIM.alz_policy_set_definition.json	231
platform/alz/policy_set_definitions/Enforce-Guardrails-AppServices.alz_policy_set_definition.json	364
platform/alz/policy_set_definitions/Enforce-Guardrails-Automation.alz_policy_set_definition.json	134
platform/alz/policy_set_definitions/Enforce-Guardrails-BotService.alz_policy_set_definition.json	104
platform/alz/policy_set_definitions/Enforce-Guardrails-CognitiveServices.alz_policy_set_definition.json	189
platform/alz/policy_set_definitions/Enforce-Guardrails-Compute.alz_policy_set_definition.json	61
platform/alz/policy_set_definitions/Enforce-Guardrails-ContainerApps.alz_policy_set_definition.json	61
platform/alz/policy_set_definitions/Enforce-Guardrails-ContainerInstance.alz_policy_set_definition.json	42
platform/alz/policy_set_definitions/Enforce-Guardrails-ContainerRegistry.alz_policy_set_definition.json	246
platform/alz/policy_set_definitions/Enforce-Guardrails-CosmosDb.alz_policy_set_definition.json	121
platform/alz/policy_set_definitions/Enforce-Guardrails-DataExplorer.alz_policy_set_definition.json	98
platform/alz/policy_set_definitions/Enforce-Guardrails-DataFactory.alz_policy_set_definition.json	117
platform/alz/policy_set_definitions/Enforce-Guardrails-EventGrid.alz_policy_set_definition.json	170
platform/alz/policy_set_definitions/Enforce-Guardrails-EventHub.alz_policy_set_definition.json	98
platform/alz/policy_set_definitions/Enforce-Guardrails-KeyVault-Sup.alz_policy_set_definition.json	59
platform/alz/policy_set_definitions/Enforce-Guardrails-KeyVault.alz_policy_set_definition.json	792
platform/alz/policy_set_definitions/Enforce-Guardrails-Kubernetes.alz_policy_set_definition.json	341
platform/alz/policy_set_definitions/Enforce-Guardrails-MachineLearning.alz_policy_set_definition.json	279
platform/alz/policy_set_definitions/Enforce-Guardrails-MySQL.alz_policy_set_definition.json	60
platform/alz/policy_set_definitions/Enforce-Guardrails-Network.alz_policy_set_definition.json	526
platform/alz/policy_set_definitions/Enforce-Guardrails-OpenAI.alz_policy_set_definition.json	227
platform/alz/policy_set_definitions/Enforce-Guardrails-PostgreSQL.alz_policy_set_definition.json	41
platform/alz/policy_set_definitions/Enforce-Guardrails-SQL.alz_policy_set_definition.json	103
platform/alz/policy_set_definitions/Enforce-Guardrails-ServiceBus.alz_policy_set_definition.json	98
platform/alz/policy_set_definitions/Enforce-Guardrails-Storage.alz_policy_set_definition.json	460
platform/alz/policy_set_definitions/Enforce-Guardrails-Synapse.alz_policy_set_definition.json	198
platform/alz/policy_set_definitions/Enforce-Guardrails-VirtualDesktop.alz_policy_set_definition.json	59
platform/alz/role_definitions/application_owners.alz_role_definition.json	28
platform/alz/role_definitions/network_management.alz_role_definition.json	26
platform/alz/role_definitions/network_subnet_contributor.alz_role_definition.json	30
platform/alz/role_definitions/security_operations.alz_role_definition.json	34
platform/alz/role_definitions/subscription_owner.alz_role_definition.json	29
platform/amba/README.md	527
platform/amba/alz_library_metadata.json	8
platform/amba/alz_policy_default_values.json	587
platform/amba/archetype_definitions/connectivity.alz_archetype_definition.json	10
platform/amba/archetype_definitions/identity.alz_archetype_definition.json	10
platform/amba/archetype_definitions/landing_zones.alz_archetype_definition.json	17
platform/amba/archetype_definitions/management.alz_archetype_definition.json	10
platform/amba/archetype_definitions/platform.alz_archetype_definition.json	11
platform/amba/archetype_definitions/root.alz_archetype_definition.json	146
platform/amba/architecture_definitions/amba.alz_architecture_definition.json	60
platform/amba/policy_assignments/deploy_amba_connectivity.alz_policy_assignment.json	206
platform/amba/policy_assignments/deploy_amba_hybridvm.alz_policy_assignment.json	131
platform/amba/policy_assignments/deploy_amba_identity.alz_policy_assignment.json	74
platform/amba/policy_assignments/deploy_amba_keymgmt.alz_policy_assignment.json	74
platform/amba/policy_assignments/deploy_amba_loadbalance.alz_policy_assignment.json	111
platform/amba/policy_assignments/deploy_amba_management.alz_policy_assignment.json	86
platform/amba/policy_assignments/deploy_amba_networkchang.alz_policy_assignment.json	62
platform/amba/policy_assignments/deploy_amba_notification.alz_policy_assignment.json	83
platform/amba/policy_assignments/deploy_amba_recoverysvc.alz_policy_assignment.json	45
platform/amba/policy_assignments/deploy_amba_storage.alz_policy_assignment.json	56
platform/amba/policy_assignments/deploy_amba_svchealth.alz_policy_assignment.json	95
platform/amba/policy_assignments/deploy_amba_vm.alz_policy_assignment.json	125
platform/amba/policy_assignments/deploy_amba_web.alz_policy_assignment.json	89
platform/amba/policy_definitions/Deploy_AA_TotalJob_Alert.alz_policy_definition.json	340
platform/amba/policy_definitions/Deploy_AFW_FirewallHealth_Alert.alz_policy_definition.json	331
platform/amba/policy_definitions/Deploy_AFW_SNATPortUtilization_Alert.alz_policy_definition.json	331
platform/amba/policy_definitions/Deploy_AG_ApplicationGatewayTotalTime_Alert.alz_policy_definition.json	386
platform/amba/policy_definitions/Deploy_AG_BackendLastByteResponseTime_Alert.alz_policy_definition.json	386
platform/amba/policy_definitions/Deploy_AG_CPUUtilization_Alert.alz_policy_definition.json	335
platform/amba/policy_definitions/Deploy_AG_CapacityUnits_Alert.alz_policy_definition.json	335
platform/amba/policy_definitions/Deploy_AG_ComputeUnits_Alert.alz_policy_definition.json	335
platform/amba/policy_definitions/Deploy_AG_FailedRequests_Alert.alz_policy_definition.json	379
platform/amba/policy_definitions/Deploy_AG_ResponseStatus_Alert.alz_policy_definition.json	389
platform/amba/policy_definitions/Deploy_AG_UnhealthyHostCount_Alert.alz_policy_definition.json	328
platform/amba/policy_definitions/Deploy_ALB_DataPathAvailability_Alert.alz_policy_definition.json	335
platform/amba/policy_definitions/Deploy_ALB_GlobalBackendAvailability_Alert.alz_policy_definition.json	332
platform/amba/policy_definitions/Deploy_ALB_HealthProbeStatus_Alert.alz_policy_definition.json	339
platform/amba/policy_definitions/Deploy_ALB_UsedSNATPorts_Alert.alz_policy_definition.json	328
platform/amba/policy_definitions/Deploy_ActivityLog_AppInsights_Delete.alz_policy_definition.json	284
platform/amba/policy_definitions/Deploy_ActivityLog_ManagedHSMs_Delete.alz_policy_definition.json	283
platform/amba/policy_definitions/Deploy_AlertProcessing_Rule.alz_policy_definition.json	550
platform/amba/policy_definitions/Deploy_DNSZ_RegistrationCapacityUtil_Alert.alz_policy_definition.json	331
platform/amba/policy_definitions/Deploy_ERCIR_ArpAvailability_Alert.alz_policy_definition.json	331
platform/amba/policy_definitions/Deploy_ERCIR_BgpAvailability_Alert.alz_policy_definition.json	331
platform/amba/policy_definitions/Deploy_ERCIR_QosDropBitsInPerSecond_Alert.alz_policy_definition.json	360
platform/amba/policy_definitions/Deploy_ERCIR_QosDropBitsOutPerSecond_Alert.alz_policy_definition.json	360
platform/amba/policy_definitions/Deploy_ERGw_ExpressRouteBitsIn_Alert.alz_policy_definition.json	331
platform/amba/policy_definitions/Deploy_ERGw_ExpressRouteBitsOut_Alert.alz_policy_definition.json	331
platform/amba/policy_definitions/Deploy_ERGw_ExpressRouteCpuUtil_Alert.alz_policy_definition.json	331
platform/amba/policy_definitions/Deploy_ERP_ExpressRoutLineProtocol_Alert.alz_policy_definition.json	328
platform/amba/policy_definitions/Deploy_ERP_ExpressRoutRxLightLevel_Alert.alz_policy_definition.json	332
platform/amba/policy_definitions/Deploy_ERP_ExpressRoutRxLightLevellow_Alert.alz_policy_definition.json	332
platform/amba/policy_definitions/Deploy_ERP_ExpressRoutTxLightLevell_Alert.alz_policy_definition.json	332
platform/amba/policy_definitions/Deploy_ERP_ExpressRoutTxLightLevellow_Alert.alz_policy_definition.json	332
platform/amba/policy_definitions/Deploy_ERP_ExpressRouteBitsIn_Alert.alz_policy_definition.json	328
platform/amba/policy_definitions/Deploy_ERP_ExpressRouteBitsOut_Alert.alz_policy_definition.json	328
platform/amba/policy_definitions/Deploy_FD_BackendHealth_Alert.alz_policy_definition.json	328
platform/amba/policy_definitions/Deploy_FD_BackendRequestLatency_Alert.alz_policy_definition.json	326
platform/amba/policy_definitions/Deploy_FrontDoorCDN_OriginHealthPercentage_Alert.alz_policy_definition.json	328
platform/amba/policy_definitions/Deploy_FrontDoorCDN_OriginLatency_Alert.alz_policy_definition.json	360
platform/amba/policy_definitions/Deploy_FrontDoorCDN_Percentage4XX_Alert.alz_policy_definition.json	360
platform/amba/policy_definitions/Deploy_FrontDoorCDN_Percentage5XX_Alert.alz_policy_definition.json	360
platform/amba/policy_definitions/Deploy_Hybrid_VM_Disconnected_Alert.alz_policy_definition.json	588
platform/amba/policy_definitions/Deploy_KeyVault_Availability_Alert.alz_policy_definition.json	331
platform/amba/policy_definitions/Deploy_KeyVault_Capacity_Alert.alz_policy_definition.json	331
platform/amba/policy_definitions/Deploy_KeyVault_Latency_Alert.alz_policy_definition.json	331
platform/amba/policy_definitions/Deploy_KeyVault_Requests_Alert.alz_policy_definition.json	326
platform/amba/policy_definitions/Deploy_LAWorkspace_DailyCapLimitReached_Alert.alz_policy_definition.json	512
platform/amba/policy_definitions/Deploy_ManagedHSMs_Availability_Alert.alz_policy_definition.json	331
platform/amba/policy_definitions/Deploy_ManagedHSMs_Latency_Alert.alz_policy_definition.json	331
platform/amba/policy_definitions/Deploy_PDNSZ_CapacityUtil_Alert.alz_policy_definition.json	331
platform/amba/policy_definitions/Deploy_PDNSZ_QueryVolume_Alert.alz_policy_definition.json	331
platform/amba/policy_definitions/Deploy_PDNSZ_RecordSetCapacity_Alert.alz_policy_definition.json	331
platform/amba/policy_definitions/Deploy_PublicIp_BytesInDDoSAttack_Alert.alz_policy_definition.json	331
platform/amba/policy_definitions/Deploy_PublicIp_DDoSAttack_Alert.alz_policy_definition.json	331
platform/amba/policy_definitions/Deploy_PublicIp_PacketsInDDoSAttack_Alert.alz_policy_definition.json	331
platform/amba/policy_definitions/Deploy_PublicIp_VIPAvailability_Alert.alz_policy_definition.json	335
platform/amba/policy_definitions/Deploy_RecoveryVault_ASRHealthMonitor_Alert.alz_policy_definition.json	107
platform/amba/policy_definitions/Deploy_RecoveryVault_BackupHealthMonitor_Alert.alz_policy_definition.json	94
platform/amba/policy_definitions/Deploy_ServiceHealth_ActionGroups.alz_policy_definition.json	468
platform/amba/policy_definitions/Deploy_StorageAccount_Availability_Alert.alz_policy_definition.json	331
platform/amba/policy_definitions/Deploy_Suppression_AlertProcessing_Rule.alz_policy_definition.json	195
platform/amba/policy_definitions/Deploy_TM_EndpointHealth_Alert.alz_policy_definition.json	337
platform/amba/policy_definitions/Deploy_VNET_DDoSAttack_Alert.alz_policy_definition.json	331
platform/amba/policy_definitions/Deploy_VPNGw_BGPPeerStatus_Alert.alz_policy_definition.json	331
platform/amba/policy_definitions/Deploy_VPNGw_BandwidthUtil_Alert.alz_policy_definition.json	331
platform/amba/policy_definitions/Deploy_VPNGw_Egress_Alert.alz_policy_definition.json	331
platform/amba/policy_definitions/Deploy_VPNGw_Ingress_Alert.alz_policy_definition.json	331
platform/amba/policy_definitions/Deploy_VPNGw_TunnelEgressPacketDropCount_Alert.alz_policy_definition.json	360
platform/amba/policy_definitions/Deploy_VPNGw_TunnelEgressPacketDropMismatch_Alert.alz_policy_definition.json	360
platform/amba/policy_definitions/Deploy_VPNGw_TunnelIngressPacketDropCount_Alert.alz_policy_definition.json	360
platform/amba/policy_definitions/Deploy_VPNGw_TunnelIngressPacketDropMismatch_Alert.alz_policy_definition.json	360
platform/amba/policy_definitions/Deploy_VnetGw_ExpressRouteBitsPerSecond_Alert.alz_policy_definition.json	335
platform/amba/policy_definitions/Deploy_VnetGw_ExpressRouteCpuUtil_Alert.alz_policy_definition.json	335
platform/amba/policy_definitions/Deploy_VnetGw_TunnelBandwidth_Alert.alz_policy_definition.json	335
platform/amba/policy_definitions/Deploy_VnetGw_TunnelEgressPacketDropCount_Alert.alz_policy_definition.json	364
platform/amba/policy_definitions/Deploy_VnetGw_TunnelEgressPacketDropMismatch_Alert.alz_policy_definition.json	364
platform/amba/policy_definitions/Deploy_VnetGw_TunnelEgress_Alert.alz_policy_definition.json	335
platform/amba/policy_definitions/Deploy_VnetGw_TunnelIngressPacketDropCount_Alert.alz_policy_definition.json	364
platform/amba/policy_definitions/Deploy_VnetGw_TunnelIngressPacketDropMismatch_Alert.alz_policy_definition.json	364
platform/amba/policy_definitions/Deploy_VnetGw_TunnelIngress_Alert.alz_policy_definition.json	335
platform/amba/policy_definitions/Deploy_WSF_CPUPercentage_Alert.alz_policy_definition.json	328
platform/amba/policy_definitions/Deploy_WSF_DiskQueueLength_Alert.alz_policy_definition.json	360
platform/amba/policy_definitions/Deploy_WSF_HttpQueueLength_Alert.alz_policy_definition.json	360
platform/amba/policy_definitions/Deploy_WSF_MemoryPercentage_Alert.alz_policy_definition.json	328
platform/amba/policy_definitions/Deploy_activitylog_Firewall_Delete.alz_policy_definition.json	283
platform/amba/policy_definitions/Deploy_activitylog_KeyVault_Delete.alz_policy_definition.json	283
platform/amba/policy_definitions/Deploy_activitylog_LAWorkspace_Delete.alz_policy_definition.json	283
platform/amba/policy_definitions/Deploy_activitylog_LAWorkspace_KeyRegen.alz_policy_definition.json	283
platform/amba/policy_definitions/Deploy_activitylog_NSG_Delete.alz_policy_definition.json	283
platform/amba/policy_definitions/Deploy_activitylog_ResourceHealth_Unhealthy_Alert.alz_policy_definition.json	419
platform/amba/policy_definitions/Deploy_activitylog_RouteTable_Delete.alz_policy_definition.json	283
platform/amba/policy_definitions/Deploy_activitylog_RouteTable_Routes_Delete.alz_policy_definition.json	283
platform/amba/policy_definitions/Deploy_activitylog_RouteTable_Update.alz_policy_definition.json	283
platform/amba/policy_definitions/Deploy_activitylog_ServiceHealth_HealthAdvisory.alz_policy_definition.json	410
platform/amba/policy_definitions/Deploy_activitylog_ServiceHealth_Incident.alz_policy_definition.json	410
platform/amba/policy_definitions/Deploy_activitylog_ServiceHealth_Maintenance.alz_policy_definition.json	410
platform/amba/policy_definitions/Deploy_activitylog_ServiceHealth_SecurityAdvisory.alz_policy_definition.json	410
platform/amba/policy_definitions/Deploy_activitylog_StorageAccount_Delete.alz_policy_definition.json	283
platform/amba/policy_definitions/Deploy_activitylog_VPNGateway_Delete.alz_policy_definition.json	282
platform/amba/policy_set_definitions/Alerting-Connectivity.alz_policy_set_definition.json	5227
platform/amba/policy_set_definitions/Alerting-HybridVM.alz_policy_set_definition.json	2594
platform/amba/policy_set_definitions/Alerting-Identity.alz_policy_set_definition.json	788
platform/amba/policy_set_definitions/Alerting-KeyManagement.alz_policy_set_definition.json	788
platform/amba/policy_set_definitions/Alerting-LoadBalancing.alz_policy_set_definition.json	2596
platform/amba/policy_set_definitions/Alerting-Management.alz_policy_set_definition.json	701
platform/amba/policy_set_definitions/Alerting-NetworkChanges.alz_policy_set_definition.json	257
platform/amba/policy_set_definitions/Alerting-RecoveryServices.alz_policy_set_definition.json	99
platform/amba/policy_set_definitions/Alerting-ServiceHealth.alz_policy_set_definition.json	462
platform/amba/policy_set_definitions/Alerting-Storage.alz_policy_set_definition.json	222
platform/amba/policy_set_definitions/Alerting-VM.alz_policy_set_definition.json	2395
platform/amba/policy_set_definitions/Alerting-Web.alz_policy_set_definition.json	1064
platform/amba/policy_set_definitions/Notification-Assets.alz_policy_set_definition.json	249
platform/fsi/README.md	813
platform/fsi/alz_library_metadata.json	13
platform/fsi/alz_policy_default_values.json	70
platform/fsi/archetype_definitions/confidential.alz_archetype_definition.json	9
platform/fsi/archetype_definitions/fsi_root.alz_archetype_definition.json	10
platform/fsi/archetype_definitions/re_01_zonal_residency.alz_archetype_definition.json	9
platform/fsi/archetype_definitions/so_01_data_residency.alz_archetype_definition.json	9
platform/fsi/archetype_definitions/so_04_cmk.alz_archetype_definition.json	9
platform/fsi/archetype_definitions/tr_01_logging.alz_archetype_definition.json	9
platform/fsi/architecture_definitions/fsi.alz_architecture_definition.json	89
platform/fsi/policy_assignments/enforce_fsi_conf.alz_policy_assignment.json	277
platform/fsi/policy_assignments/re_01_zonal_residency.alz_policy_assignment.json	23
platform/fsi/policy_assignments/so_01_data_residency.alz_policy_assignment.json	26
platform/fsi/policy_assignments/so_04_cmk.alz_policy_assignment.json	23
platform/fsi/policy_assignments/tr_01_logging.alz_policy_assignment.json	23
platform/fsi/policy_set_definitions/SO-01-Data-Residency.alz_policy_set_definition.json	93
platform/fsi/policy_set_definitions/SO-04-CMK.alz_policy_set_definition.json	147
platform/slz/README.md	784
platform/slz/alz_library_metadata.json	13
platform/slz/alz_policy_default_values.json	65
platform/slz/archetype_definitions/confidential.alz_archetype_definition.json	9
platform/slz/archetype_definitions/global.alz_archetype_definition.json	9
platform/slz/architecture_definitions/slz.alz_architecture_definition.json	89
platform/slz/policy_assignments/enforce_sovereign_conf.alz_policy_assignment.json	277
platform/slz/policy_assignments/enforce_sovereign_global.alz_policy_assignment.json	25
schemas/README.md	3
schemas/archetype_definition.json	36
schemas/archetype_override.json	80
schemas/architecture_definition.json	49
schemas/default_policy_values.json	48
schemas/library_metadata.json	37