Repository navigation
ARO Security Baseline / LZA #356
Description
given the ARO LZA doc, may I suggest an update to include the egress lockdown, Managed Identities, BackUp with Velero, Gateway API, Key Vault, AGC, MS Defender for Containers through Azure Arc, Notary V2/signing container artifcats, etc.
Activity
ezYakaEagle442 commentedon Feb 18, 2026
Azure announced in 2023 :
After March 31, 2026, new virtual networks will default to creation of private subnets which can no longer use default outbound access connectivity.
Does it mean that AZO LZA should also add a NAT Gateway or Azure Firewall are mentioned in the VNet doc ?