Compliance - 2

2025 (7)

October (3)

k8s: Spotlight on Policy Working Group

Kubernetes Official Blog

2025-10-18

The Policy Working Group (now completed) worked to standardize and simplify policy management across the Kubernetes ecosystem. Led by co-chairs Jim Bugwadia, Poonam Lamba, and Andy Suderman, the group produced documentation, whitepapers, a CNCF survey, and the Policy Reports API, and helped educate the community about built-in policy APIs and CNCF policy tools. The WG coordinated with SIG Auth and SIG Security, faced contributor-time and consensus challenges, and encouraged newcomers to join meetings and review materials to get involved.

azure: [Launched] Generally Available: Locations API Update for UK Azure Regions

Azure Updates

2025-10-15

Azure has updated the Locations API metadata for UK-based regions by changing the geographyGroup and regionalDisplayName fields to meet evolving compliance and regulatory requirements. The changes are in effect October 2025.

azure: [In preview] Public Preview: Introducing Vaulted Backup for Azure Data Lake Storage

Azure Updates

2025-10-09

Microsoft announced the Public Preview of Vaulted Backup for Azure Data Lake Storage (ADLS). Azure Backup now supports vaulted protection for ADLS, providing secure off‑site backups to help ensure business continuity and compliance and to protect data from accidental deletion.

September (3)

azure: [Launched] Generally Available: Vaulted backup for Azure Files (Premium)

Azure Updates

2025-09-22

Azure Backup now offers generally available vaulted backups for Azure Files premium shares, providing vault-based protection to help ensure business continuity and compliance.

github: Delegated bypass controls for push protection now available at the enterprise level

GitHub

2025-09-16

GitHub now offers delegated bypass controls for push protection at the enterprise level. Administrators can choose who is allowed to bypass secret-scanning push protections and designate reviewers for bypass requests, centrally managing approvers to improve governance and reduce risk.

github: Enterprise access restrictions with corporate proxies is now generally available

GitHub

2025-09-15

GitHub announced general availability of enterprise access restrictions using corporate proxies for GitHub Enterprise Cloud accounts that use Enterprise Managed Users (EMU). Enterprise owners can now enforce access controls tied to corporate proxy infrastructure to improve security and compliance for managed enterprise identities.

August (1)

terraform: Policy as code, explained

Terraform

2025-08-28

Policy as code automates the verification of compliance with IT and business requirements during infrastructure deployments, providing rapid checks within minutes or seconds.