ITADN

AzAdvertizer data changes detected

#2746Openavm-organizer[bot] 创建于 2026-05-31
Needs: Triage :mag:
Azure Advertizer Data Diff Report Resource Type: microsoft.network/azurefirewalls -------------------------------------------------- New APRL Recommendations: - [Monitor "AZFW Latency Probe" metric](https://azure.github.io/Azure-Proactive-Resiliency-Library-v2/azure-resources/Network/azureFirewalls/#monitor-azfw-latency-probe-metric) Resource Type: microsoft.network/natgateways -------------------------------------------------- New Advisor Recommendations: - [Use Zone-Redundant NAT Gateway configuration to reduce outages](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/374b21de-e7ec-409a-9961-93e789e27536) Resource Type: microsoft.security/awsresource -------------------------------------------------- New Advisor Recommendations: - [Avoid the use of the "root" account](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/a47a6c3b-0629-406c-ad09-d91f7d9f78a3) - [IAM policies that allow full "*:*" administrative privileges should not be created](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/1d08b362-7e24-46b0-bed1-4a6c1d1526a5) - [AWS WAF web ACL should be associated with AppSync APIs](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/6fa77491-9118-4ad7-9272-93d0fede5f97) - [Trust policy scoping conditions should be enforced on unauthenticated IAM roles for Amazon Cognito Identity Pool](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/b7a40a0f-07e8-49a1-a188-b65462cc0351) - [Wildcard principals should be removed from Amazon Cognito Identity Pool IAM role trust policies](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/ad3ee851-7249-47a0-bf04-5b534a234942) - [Public access should be disabled on DMS replication instances](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/d9bf7990-d9cf-4700-a48e-ccad9001de3b) - [Security configuration should be enabled on EMR clusters](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/c5a0b536-56b8-46a8-b2ee-93f32f6e4986) - [Public network access should be disabled on EMR cluster primary nodes](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/da9c9a82-f23b-47c1-a607-eba6e9d607dc) - [TLS encryption for data in transit should be configured on Amazon MSK clusters](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/99836a73-edd3-40f7-b8df-b859100131d5) - [Public access should be disabled on Amazon MSK clusters](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/9a1f2178-aa34-4b06-8985-ec811bc77ce9) - [Unauthenticated access should be disabled on Amazon MSK clusters](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/d46996b0-d15e-40d7-84a8-b4d9e9399f9d) - [VPC access should be enabled on OpenSearch Service domains](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/6548dc9e-7a81-40ba-a11c-9d0b90c7fdbf) - [Secure authorization modes should be configured on AppSync APIs](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/5916f9f7-e791-4bea-ae39-bd57e6c4fee9) - [Anonymous access should be removed on OpenSearch Service domains](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/78376d05-e361-4936-aced-582166562a9c) Resource Type: microsoft.signalrservice/webpubsub -------------------------------------------------- New Advisor Recommendations: - [Deploy Azure Web PubSub in a zone-redundant configuration](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/b2bab712-303b-486c-b9fc-3588fa47c00d) Resource Type: microsoft.sql/managedinstances -------------------------------------------------- New Advisor Recommendations: - [Enable zone redundancy for SQL Managed Instance databases](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/4c400f75-46b6-42a5-9c18-b80602a44531) Resource Type: microsoft.sqlvirtualmachine/sqlvirtualmachines -------------------------------------------------- New Advisor Recommendations: - [Deploy SQL Virtual Machines across availability zones](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/cb5f37e8-2ce6-4f50-baa0-a2a8c25a2293)
1 条评论