documenter-azure-landingzone

Author(s)

• Alex ter Neuzen

Tags

Azure LandingZone AzureLandingZone CloudAdoptionFramework CAF WAF WellArchitectedFramework Inventory Governance Policy RBAC Dashboard Documentation Documenter ManagementGroups Subscriptions Networking

Functions

Get-AzureLandingZoneInventory Start-AzureLandingZoneServer

Dependencies

• • Az.Accounts (>= 2.0.0)
  • Az.Network (>= 5.0.0)
  • Az.PolicyInsights (>= 1.0.0)
  • Az.Resources (>= 6.0.0)

Release Notes

v1.1.0 (security hardening — see changes.md)
 - Removed wildcard CORS header; API is now same-origin only
 - CSRF protection: /api/auth/login and /api/inventory/refresh require POST + X-Requested-With header
 - Az context file moved to ~/.documenter-azure-landingzone (0700/0600), deleted after use and on shutdown
 - Replaced Invoke-Expression / eval() condition evaluation with a strict safe parser
 - All Azure-derived values HTML-escaped in the dashboard (XSS fix)
 - Subresource Integrity + Content-Security-Policy for CDN assets; X-Content-Type-Options: nosniff
 - Az modules are no longer auto-updated (install-if-missing only; manual Update-Module advised)
 - API errors return generic messages; details go to the server console only

v1.0.0
 - Initial release of the Azure Landing Zone Inventory & Assessment Tool
 - Comprehensive inventory collection: management groups, subscriptions, policies, RBAC, networking
 - CAF compliance assessment with automated scoring
 - WAF alignment scoring across 5 pillars (Reliability, Security, Cost, Operations, Performance)
 - Interactive local web dashboard with real-time data
 - Professional PDF export with tables, charts, and recommendations
 - Automatic module management (auto-install required Az modules)
 - Cross-subscription scanning across all accessible Azure subscriptions
 - Graceful Ctrl+C / server shutdown handling