Programmatically triggering azure policy remediation

Question

I have got azure policy auto remediation in place, however the process is a manual one where the remediation tasks needs to be manually triggered. I was wondering if there is a way to programmatically trigger the running of the remediation job.

I can see the remediation tasks, however they are a manual step that has to be triggered when required. I would ideally love to automate the process.

Any thoughts on a potential solution here.

If you enable remediation while assigning the policy, the remediation will trigger automatically without manual intervention. If still want to start remediation, you can use PowerShell Cmd: Start-AzPolicyRemediation -PolicyAssignmentId $policyAssignmentId -Name "remediation1" — Venkateswarlu V
– Venkateswarlu V, Commented Sep 10, 2024 at 5:50

Venkateswarlu V · Accepted Answer · 2024-09-11 11:56:00Z

1

Programmatically triggering azure policy remediation

Here is the Azure PowerShell code to trigger the remediation without manual intervention., You want to automate this process, you can use Azure automation account, follow the stack link to create automation account.

$policyassignmentNames = @("Storage enable Policy", "Network Security Group rule deny", "NSG_Rule_Deny", "JIT Port deny", "Azure Policy to modify Log analytics workspace destination of a data collection rule","JIM_Port_3389 and 22 Restricted")

$policyAssignments = Get-AzPolicyAssignment -BackwardCompatible -WarningAction silentlyContinue | Where-Object { $policyassignmentNames -contains $_.DisplayName }

foreach ($policy in $policyAssignments){

$remediatename= "Remeadite." + $policy.DisplayName

write-output "Starting the remediation with Policy Assignment Name :$($policy.DisplayName)"

Start-AzPolicyRemediation -Name "$remediatename" -PolicyAssignmentId $policy.PolicyAssignmentId -ResourceDiscoveryMode ReEvaluateCompliance
}

Output:

enter image description here

answered Sep 11, 2024 at 11:56

Venkateswarlu V

8,3032 gold badges5 silver badges16 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

David Makogon Over a year ago

Please do not upload images of code/data/errors. Aside from that: the question is off-topic, as it's just a requirement and asking someone to build a solution - that's not the purpose of Stack Overflow.

Collectives™ on Stack Overflow

Programmatically triggering azure policy remediation

1 Answer 1

1 Comment

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Your Answer

Sign up or log in

Post as a guest

Linked

Related