Network-25533 : DDoS Protection is enabled for all Public IP Addresses in VNETs

[kshitiz-prog]

No description provided.

[Copilot]

Pull request overview

This pull request introduces a new security assessment test (Test-Assessment-25533) that verifies whether DDoS Protection is enabled for all Public IP Addresses in Azure Virtual Networks. The test checks Azure subscriptions for public IPs and validates that each has DDoS protection configured either through VNET inheritance or direct enablement.

Changes:

• Added PowerShell test script that connects to Azure, iterates through subscriptions, and checks DDoS protection settings on public IP addresses
• Added markdown documentation explaining the security risks of unprotected public IPs and remediation steps
• Test uses Azure REST API to query public IP addresses and their DDoS protection configuration

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 8 comments.

File	Description
src/powershell/tests/Test-Assessment.25533.ps1	PowerShell test implementation that queries Azure subscriptions for public IPs and evaluates DDoS protection compliance
src/powershell/tests/Test-Assessment.25533.md	Documentation explaining DDoS attack risks and providing remediation guidance for enabling protection

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.