What is the difference between this and Powershell DSC ?

[es-cs1]

Do you have a FAQ describing the rationale when to choose either solution?

[pallakatos]

Hi there @es-cs1, the "compliancemodule" of azure-osconfig is the engine to support the built-in CIS Benchmarks in Azure Machine Configuration recently announced at Ignite:

Learning site: https://learn.microsoft.com/en-us/azure/governance/policy/samples/guest-configuration-baseline-cis-linux
Announcement blog: https://techcommunity.microsoft.com/blog/linuxandopensourceblog/from-policy-to-practice-built-in-cis-benchmarks-on-azure---flexible-hybrid-ready/4467884

We are also working on exposing custom rule creation too. The difference between this and DSC is that DSC requires Powershell to be installed on the servers - while this operates and have been implemented on a Linux-native way.

Please let me know if this helps or you want additional info.

Kr,
Pal