deny old webhooks with 403.

PublicWebhooks/run.ps1

@@ -10,22 +10,23 @@ Write-Host 'Received request'
 Write-Host "CIPPID: $($request.Query.CIPPID)"
 $url = ($request.headers.'x-ms-original-url').split('/API') | Select-Object -First 1
 Write-Host $url
-if ($Request.Query.CIPPID -in $Webhooks.RowKey) {
+if ($Request.Query.CIPPID -in $Webhooks.RowKey -and $Webhooks.Resource -ne 'M365AuditLogs') {
     Write-Host 'Found matching CIPPID'
-
     if ($Request.query.ValidationToken -or $Request.body.validationCode) {
         Write-Host 'Validation token received'
         $body = $request.query.ValidationToken
     } else {
         Push-OutputBinding -Name QueueWebhook -Value $Request
         $Body = 'Webhook Recieved'
+        $StatusCode = [HttpStatusCode]::OK
     }
 } else {
     $body = 'This webhook is not authorized.'
+    $StatusCode = [HttpStatusCode]::Forbidden
 }
 
 # Associate values to output bindings by calling 'Push-OutputBinding'.
 Push-OutputBinding -Name Response -Value ([HttpResponseContext]@{
-        StatusCode = [HttpStatusCode]::OK
+        StatusCode = $StatusCode
         Body       = $body
     })