Existing rule
No response
Suggested rule
Any configured additional locations of fleet resources should be within allowed locations if configured.
Pillar
Security
Additional context
This is similar to the existing rule Azure.EntraDS.ReplicaLocation.
References: