Network - 25533 - DDoS Protection is enabled for all Public IP Addresses in VNETs #duplicate by kshitiz-prog · Pull Request #840 · microsoft/zerotrustassessment

kshitiz-prog · 2026-01-29T08:27:15Z

No description provided.

Copilot

Pull request overview

This pull request introduces a new security assessment test (Test-Assessment-25533) that verifies whether DDoS Protection is enabled for all Public IP Addresses in Azure Virtual Networks. The test checks Azure subscriptions for public IPs and validates that each has DDoS protection configured either through VNET inheritance or direct enablement.

Changes:

Added PowerShell test script that connects to Azure, iterates through subscriptions, and checks DDoS protection settings on public IP addresses
Added markdown documentation explaining the security risks of unprotected public IPs and remediation steps
Test uses Azure REST API to query public IP addresses and their DDoS protection configuration

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 8 comments.

File	Description
src/powershell/tests/Test-Assessment.25533.ps1	PowerShell test implementation that queries Azure subscriptions for public IPs and evaluates DDoS protection compliance
src/powershell/tests/Test-Assessment.25533.md	Documentation explaining DDoS attack risks and providing remediation guidance for enabling protection

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

src/powershell/tests/Test-Assessment.25533.md

src/powershell/tests/Test-Assessment.25533.ps1

src/powershell/tests/Test-Assessment.25533.md

src/powershell/tests/Test-Assessment.25533.ps1

src/powershell/tests/Test-Assessment.25533.md

Copilot

Pull request overview

Copilot reviewed 2 out of 2 changed files in this pull request and generated 3 comments.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

src/powershell/tests/Test-Assessment.25533.ps1

… into Network-25533

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

Copilot

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.

Copilot

Pull request overview

Copilot reviewed 2 out of 2 changed files in this pull request and generated 2 comments.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

src/powershell/tests/Test-Assessment.25533.ps1

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

Copilot

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

Copilot

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.

Manoj-Kesana · 2026-02-19T09:06:57Z

Closing to avoid duplicate

kshitiz-prog and others added 9 commits January 6, 2026 09:20

25533

9d5754f

Code fix

9fbc8ee

25533

47c672b

Code fix

26a589e

rebase to main

e6fbe2d

Rebase main

d8c1bb1

code fix fpr 25533

c53e08d

Updated code for 25533 -- With fixes

0f411f2

Code update as per spec

b0145bb

kshitiz-prog requested review from alexandair and merill January 29, 2026 08:27

kshitiz-prog self-assigned this Jan 29, 2026

alexandair requested a review from Copilot February 5, 2026 23:01

Copilot started reviewing on behalf of alexandair February 5, 2026 23:02 View session

Copilot AI reviewed Feb 5, 2026

View reviewed changes

Kshitiz sharma and others added 3 commits February 13, 2026 08:25

Code refinement

3f41665

Trigger validation with current main

ea85dc2

Code update with graph QL

3d70d04

Copilot AI review requested due to automatic review settings February 16, 2026 08:09

Copilot started reviewing on behalf of kshitiz-prog February 16, 2026 08:09 View session

Copilot AI reviewed Feb 16, 2026

View reviewed changes

src/powershell/tests/Test-Assessment.25533.ps1 Outdated Show resolved Hide resolved

src/powershell/tests/Test-Assessment.25533.ps1 Show resolved Hide resolved

src/powershell/tests/Test-Assessment.25533.ps1 Outdated Show resolved Hide resolved

Manoj-Kesana assigned Manoj-Kesana and unassigned kshitiz-prog Feb 16, 2026

Manoj-Kesana marked this pull request as draft February 16, 2026 12:13

Manoj-Kesana changed the title ~~Network-25533 : DDoS Protection is enabled for all Public IP Addresses in VNETs~~ Network - 25533 - DDoS Protection is enabled for all Public IP Addresses in VNETs Feb 16, 2026

Manoj-Kesana and others added 2 commits February 17, 2026 18:50

Merge branch 'main' of https://github.com/microsoft/zerotrustassessment…

9df7d69

… into Network-25533

Update src/powershell/tests/Test-Assessment.25533.ps1

128dcc1

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

Copilot AI review requested due to automatic review settings February 17, 2026 13:27

Copilot AI reviewed Feb 17, 2026

View reviewed changes

Manoj-Kesana marked this pull request as ready for review February 17, 2026 14:02

alexandair requested a review from Copilot February 17, 2026 15:15

Copilot started reviewing on behalf of alexandair February 17, 2026 15:18 View session

Manoj-Kesana added the ready for review PR is ready for review and merging label Feb 17, 2026

alexandair requested review from Copilot and removed request for Copilot February 17, 2026 17:45

Copilot started reviewing on behalf of alexandair February 17, 2026 17:46 View session

Copilot AI reviewed Feb 17, 2026

View reviewed changes

src/powershell/tests/Test-Assessment.25533.ps1 Outdated Show resolved Hide resolved

src/powershell/tests/Test-Assessment.25533.ps1 Outdated Show resolved Hide resolved

Update src/powershell/tests/Test-Assessment.25533.ps1

7655dab

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

Copilot AI review requested due to automatic review settings February 17, 2026 17:51

Copilot AI reviewed Feb 17, 2026

View reviewed changes

Update src/powershell/tests/Test-Assessment.25533.ps1

2bdd322

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

Copilot AI review requested due to automatic review settings February 17, 2026 17:56

Copilot AI reviewed Feb 17, 2026

View reviewed changes

kshitiz-prog closed this Feb 19, 2026

Manoj-Kesana reopened this Feb 19, 2026

Manoj-Kesana closed this Feb 19, 2026

Manoj-Kesana changed the title ~~Network - 25533 - DDoS Protection is enabled for all Public IP Addresses in VNETs~~ Network - 25533 - DDoS Protection is enabled for all Public IP Addresses in VNETs #duplicate Feb 19, 2026

Manoj-Kesana deleted the Network-25533 branch February 20, 2026 17:49

Comments

Conversation

kshitiz-prog commented Jan 29, 2026

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Uh oh!

Manoj-Kesana commented Feb 19, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants