Built-in Policy Release 4f693b09 (#1360)

Co-authored-by: Azure Policy Bot <azgovpolicy@microsoft.com>
Azure · Jul 31, 2024 · f5783b7 · f5783b7
1 parent 079b3ac
commit f5783b7
Show file tree

Hide file tree

Showing 33 changed files with 3,221 additions and 98 deletions.
diff --git a/...Definitions/Azure Government/Monitoring/DependencyAgentExtension_Linux_HybridVM_DINE.json b/...Definitions/Azure Government/Monitoring/DependencyAgentExtension_Linux_HybridVM_DINE.json
@@ -5,10 +5,10 @@
     "mode": "Indexed",
     "description": "Enable VM insights on servers and machines connected to Azure through Arc enabled servers by installing the Dependency agent virtual machine extension. VM insights uses the Dependency agent to collect network metrics and discovered data about processes running on the machine and external process dependencies. See more - https://aka.ms/vminsightsdocs.",
     "metadata": {
-      "version": "2.0.0",
+      "version": "2.1.0",
       "category": "Monitoring"
     },
-    "version": "2.0.0",
+    "version": "2.1.0",
     "parameters": {
       "effect": {
         "type": "string",
@@ -76,7 +76,8 @@
                 "variables": {
                   "vmExtensionName": "DependencyAgentLinux",
                   "vmExtensionPublisher": "Microsoft.Azure.Monitoring.DependencyAgent",
-                  "vmExtensionType": "DependencyAgentLinux"
+                  "vmExtensionType": "DependencyAgentLinux",
+                  "vmExtensionTypeHandlerVersion": "9.10"
                 },
                 "resources": [
                   {
@@ -87,6 +88,9 @@
                     "properties": {
                       "publisher": "[variables('vmExtensionPublisher')]",
                       "type": "[variables('vmExtensionType')]",
+                      "typeHandlerVersion": "[variables('vmExtensionTypeHandlerVersion')]",
+                      "autoUpgradeMinorVersion": true,
+                      "enableAutomaticUpgrade": true,
                       "settings": {}
                     }
                   }
@@ -112,6 +116,7 @@
       }
     },
     "versions": [
+      "2.1.0",
       "2.0.0"
     ]
   },

diff --git a/...tions/Azure Government/Monitoring/DependencyAgentExtension_Linux_HybridVM_Deploy_AMA.json b/...tions/Azure Government/Monitoring/DependencyAgentExtension_Linux_HybridVM_Deploy_AMA.json
@@ -1,15 +1,14 @@
 {
   "properties": {
-    "displayName": "[Preview]: Configure Dependency agent on Azure Arc enabled Linux servers with Azure Monitoring Agent settings",
+    "displayName": "Configure Dependency agent on Azure Arc enabled Linux servers with Azure Monitoring Agent settings",
     "policyType": "BuiltIn",
     "mode": "Indexed",
     "description": "Enable VM insights on servers and machines connected to Azure through Arc enabled servers by installing the Dependency agent virtual machine extension with Azure Monitoring Agent settings. VM insights uses the Dependency agent to collect network metrics and discovered data about processes running on the machine and external process dependencies. See more - https://aka.ms/vminsightsdocs.",
     "metadata": {
-      "version": "1.1.1-preview",
-      "category": "Monitoring",
-      "preview": true
+      "version": "1.2.0",
+      "category": "Monitoring"
     },
-    "version": "1.1.1-preview",
+    "version": "1.2.0",
     "parameters": {
       "effect": {
         "type": "string",
@@ -93,7 +92,8 @@
                 "variables": {
                   "vmExtensionName": "DependencyAgentLinux",
                   "vmExtensionPublisher": "Microsoft.Azure.Monitoring.DependencyAgent",
-                  "vmExtensionType": "DependencyAgentLinux"
+                  "vmExtensionType": "DependencyAgentLinux",
+                  "vmExtensionTypeHandlerVersion": "9.10"
                 },
                 "resources": [
                   {
@@ -104,6 +104,9 @@
                     "properties": {
                       "publisher": "[variables('vmExtensionPublisher')]",
                       "type": "[variables('vmExtensionType')]",
+                      "typeHandlerVersion": "[variables('vmExtensionTypeHandlerVersion')]",
+                      "autoUpgradeMinorVersion": true,
+                      "enableAutomaticUpgrade": true,
                       "settings": {
                         "enableAMA": "true"
                       }
@@ -131,6 +134,7 @@
       }
     },
     "versions": [
+      "1.2.0",
       "1.1.1-PREVIEW"
     ]
   },

diff --git a/...finitions/Azure Government/Monitoring/DependencyAgentExtension_Windows_HybridVM_DINE.json b/...finitions/Azure Government/Monitoring/DependencyAgentExtension_Windows_HybridVM_DINE.json
@@ -5,10 +5,10 @@
     "mode": "Indexed",
     "description": "Enable VM insights on servers and machines connected to Azure through Arc enabled servers by installing the Dependency agent virtual machine extension. VM insights uses the Dependency agent to collect network metrics and discovered data about processes running on the machine and external process dependencies. See more - https://aka.ms/vminsightsdocs.",
     "metadata": {
-      "version": "2.0.0",
+      "version": "2.1.0",
       "category": "Monitoring"
     },
-    "version": "2.0.0",
+    "version": "2.1.0",
     "parameters": {
       "effect": {
         "type": "string",
@@ -75,7 +75,8 @@
                 },
                 "variables": {
                   "DaExtensionName": "DependencyAgentWindows",
-                  "DaExtensionType": "DependencyAgentWindows"
+                  "DaExtensionType": "DependencyAgentWindows",
+                  "DaExtensionTypeHandlerVersion": "9.10"
                 },
                 "resources": [
                   {
@@ -86,6 +87,8 @@
                     "properties": {
                       "publisher": "Microsoft.Azure.Monitoring.DependencyAgent",
                       "type": "[variables('DaExtensionType')]",
+                      "typeHandlerVersion": "[variables('DaExtensionTypeHandlerVersion')]",
+                      "enableAutomaticUpgrade": true,
                       "autoUpgradeMinorVersion": true,
                       "settings": {}
                     }
@@ -112,6 +115,7 @@
       }
     },
     "versions": [
+      "2.1.0",
       "2.0.0"
     ]
   },

diff --git a/...ons/Azure Government/Monitoring/DependencyAgentExtension_Windows_HybridVM_Deploy_AMA.json b/...ons/Azure Government/Monitoring/DependencyAgentExtension_Windows_HybridVM_Deploy_AMA.json
@@ -1,15 +1,14 @@
 {
   "properties": {
-    "displayName": "[Preview]: Configure Dependency agent on Azure Arc enabled Windows servers with Azure Monitoring Agent settings",
+    "displayName": "Configure Dependency agent on Azure Arc enabled Windows servers with Azure Monitoring Agent settings",
     "policyType": "BuiltIn",
     "mode": "Indexed",
     "description": "Enable VM insights on servers and machines connected to Azure through Arc enabled servers by installing the Dependency agent virtual machine extension with Azure Monitoring Agent settings. VM insights uses the Dependency agent to collect network metrics and discovered data about processes running on the machine and external process dependencies. See more - https://aka.ms/vminsightsdocs.",
     "metadata": {
-      "version": "1.1.1-preview",
-      "category": "Monitoring",
-      "preview": true
+      "version": "1.2.0",
+      "category": "Monitoring"
     },
-    "version": "1.1.1-preview",
+    "version": "1.2.0",
     "parameters": {
       "effect": {
         "type": "string",
@@ -92,7 +91,8 @@
                 },
                 "variables": {
                   "DaExtensionName": "DependencyAgentWindows",
-                  "DaExtensionType": "DependencyAgentWindows"
+                  "DaExtensionType": "DependencyAgentWindows",
+                  "DaExtensionTypeHandlerVersion": "9.10"
                 },
                 "resources": [
                   {
@@ -103,6 +103,8 @@
                     "properties": {
                       "publisher": "Microsoft.Azure.Monitoring.DependencyAgent",
                       "type": "[variables('DaExtensionType')]",
+                      "typeHandlerVersion": "[variables('DaExtensionTypeHandlerVersion')]",
+                      "enableAutomaticUpgrade": true,
                       "autoUpgradeMinorVersion": true,
                       "settings": {
                         "enableAMA": "true"
@@ -131,6 +133,7 @@
       }
     },
     "versions": [
+      "1.2.0",
       "1.1.1-PREVIEW"
     ]
   },

diff --git a/built-in-policies/policyDefinitions/Monitoring/AzureMonitor_Agent_Linux_VMSS_Audit.json b/built-in-policies/policyDefinitions/Monitoring/AzureMonitor_Agent_Linux_VMSS_Audit.json
@@ -5,10 +5,10 @@
     "mode": "Indexed",
     "description": "Linux virtual machine scale sets should be monitored and secured through the deployed Azure Monitor Agent. The Azure Monitor Agent collects telemetry data from the guest OS. This policy will audit virtual machine scale sets with supported OS images in supported regions. Learn more: https://aka.ms/AMAOverview.",
     "metadata": {
-      "version": "3.2.0",
+      "version": "3.3.0",
       "category": "Monitoring"
     },
-    "version": "3.2.0",
+    "version": "3.3.0",
     "parameters": {
       "effect": {
         "type": "String",
@@ -386,7 +386,7 @@
                   },
                   {
                     "field": "Microsoft.Compute/imageOffer",
-                    "equals": "almalinux"
+                    "like": "almalinux*"
                   },
                   {
                     "anyOf": [
@@ -510,6 +510,7 @@
       }
     },
     "versions": [
+      "3.3.0",
       "3.2.0",
       "3.1.0"
     ]

diff --git a/built-in-policies/policyDefinitions/Monitoring/AzureMonitor_Agent_Linux_VMSS_DINE.json b/built-in-policies/policyDefinitions/Monitoring/AzureMonitor_Agent_Linux_VMSS_DINE.json
@@ -5,10 +5,10 @@
     "mode": "Indexed",
     "description": "Automate the deployment of Azure Monitor Agent extension on your Linux virtual machine scale sets for collecting telemetry data from the guest OS. This policy will install the extension if the OS and region are supported and system-assigned managed identity is enabled, and skip install otherwise. Learn more: https://aka.ms/AMAOverview.",
     "metadata": {
-      "version": "3.5.0",
+      "version": "3.6.0",
       "category": "Monitoring"
     },
-    "version": "3.5.0",
+    "version": "3.6.0",
     "parameters": {
       "effect": {
         "type": "String",
@@ -390,7 +390,7 @@
                   },
                   {
                     "field": "Microsoft.Compute/imageOffer",
-                    "equals": "almalinux"
+                    "like": "almalinux*"
                   },
                   {
                     "anyOf": [
@@ -563,6 +563,7 @@
       }
     },
     "versions": [
+      "3.6.0",
       "3.5.0",
       "3.4.0",
       "3.3.0"

diff --git a/built-in-policies/policyDefinitions/Monitoring/AzureMonitor_Agent_Linux_VMSS_UAI_DINE.json b/built-in-policies/policyDefinitions/Monitoring/AzureMonitor_Agent_Linux_VMSS_UAI_DINE.json
@@ -5,10 +5,10 @@
     "mode": "Indexed",
     "description": "Automate the deployment of Azure Monitor Agent extension on your Linux virtual machine scale sets for collecting telemetry data from the guest OS. This policy will install the extension and configure it to use the specified user-assigned managed identity if the OS and region are supported, and skip install otherwise. Learn more: https://aka.ms/AMAOverview.",
     "metadata": {
-      "version": "3.7.0",
+      "version": "3.8.0",
       "category": "Monitoring"
     },
-    "version": "3.7.0",
+    "version": "3.8.0",
     "parameters": {
       "effect": {
         "type": "String",
@@ -444,7 +444,7 @@
                   },
                   {
                     "field": "Microsoft.Compute/imageOffer",
-                    "equals": "almalinux"
+                    "like": "almalinux*"
                   },
                   {
                     "anyOf": [
@@ -631,6 +631,7 @@
       }
     },
     "versions": [
+      "3.8.0",
       "3.7.0",
       "3.6.0",
       "3.5.0",

diff --git a/built-in-policies/policyDefinitions/Monitoring/AzureMonitor_Agent_Linux_VM_Audit.json b/built-in-policies/policyDefinitions/Monitoring/AzureMonitor_Agent_Linux_VM_Audit.json
@@ -5,10 +5,10 @@
     "mode": "Indexed",
     "description": "Linux virtual machines should be monitored and secured through the deployed Azure Monitor Agent. The Azure Monitor Agent collects telemetry data from the guest OS. This policy will audit virtual machines with supported OS images in supported regions. Learn more: https://aka.ms/AMAOverview.",
     "metadata": {
-      "version": "3.2.0",
+      "version": "3.3.0",
       "category": "Monitoring"
     },
-    "version": "3.2.0",
+    "version": "3.3.0",
     "parameters": {
       "effect": {
         "type": "String",
@@ -386,7 +386,7 @@
                   },
                   {
                     "field": "Microsoft.Compute/imageOffer",
-                    "equals": "almalinux"
+                    "like": "almalinux*"
                   },
                   {
                     "anyOf": [
@@ -510,6 +510,7 @@
       }
     },
     "versions": [
+      "3.3.0",
       "3.2.0",
       "3.1.0"
     ]

diff --git a/built-in-policies/policyDefinitions/Monitoring/AzureMonitor_Agent_Linux_VM_DINE.json b/built-in-policies/policyDefinitions/Monitoring/AzureMonitor_Agent_Linux_VM_DINE.json
@@ -5,10 +5,10 @@
     "mode": "Indexed",
     "description": "Automate the deployment of Azure Monitor Agent extension on your Linux virtual machines for collecting telemetry data from the guest OS. This policy will install the extension if the OS and region are supported and system-assigned managed identity is enabled, and skip install otherwise. Learn more: https://aka.ms/AMAOverview.",
     "metadata": {
-      "version": "3.5.0",
+      "version": "3.6.0",
       "category": "Monitoring"
     },
-    "version": "3.5.0",
+    "version": "3.6.0",
     "parameters": {
       "effect": {
         "type": "String",
@@ -390,7 +390,7 @@
                   },
                   {
                     "field": "Microsoft.Compute/imageOffer",
-                    "equals": "almalinux"
+                    "like": "almalinux*"
                   },
                   {
                     "anyOf": [
@@ -563,6 +563,7 @@
       }
     },
     "versions": [
+      "3.6.0",
       "3.5.0",
       "3.4.0",
       "3.3.0"

diff --git a/built-in-policies/policyDefinitions/Monitoring/AzureMonitor_Agent_Linux_VM_UAI_DINE.json b/built-in-policies/policyDefinitions/Monitoring/AzureMonitor_Agent_Linux_VM_UAI_DINE.json
@@ -5,10 +5,10 @@
     "mode": "Indexed",
     "description": "Automate the deployment of Azure Monitor Agent extension on your Linux virtual machines for collecting telemetry data from the guest OS. This policy will install the extension and configure it to use the specified user-assigned managed identity if the OS and region are supported, and skip install otherwise. Learn more: https://aka.ms/AMAOverview.",
     "metadata": {
-      "version": "3.7.0",
+      "version": "3.8.0",
       "category": "Monitoring"
     },
-    "version": "3.7.0",
+    "version": "3.8.0",
     "parameters": {
       "effect": {
         "type": "String",
@@ -444,7 +444,7 @@
                   },
                   {
                     "field": "Microsoft.Compute/imageOffer",
-                    "equals": "almalinux"
+                    "like": "almalinux*"
                   },
                   {
                     "anyOf": [
@@ -631,6 +631,7 @@
       }
     },
     "versions": [
+      "3.8.0",
       "3.7.0",
       "3.6.0",
       "3.5.0",

diff --git a/built-in-policies/policyDefinitions/Monitoring/AzureMonitor_DCRA_Linux_DINE.json b/built-in-policies/policyDefinitions/Monitoring/AzureMonitor_DCRA_Linux_DINE.json
@@ -5,10 +5,10 @@
     "mode": "Indexed",
     "description": "Deploy Association to link Linux virtual machines, virtual machine scale sets, and Arc machines to the specified Data Collection Rule or the specified Data Collection Endpoint. The list of locations and OS images are updated over time as support is increased.",
     "metadata": {
-      "version": "6.4.0",
+      "version": "6.5.0",
       "category": "Monitoring"
     },
-    "version": "6.4.0",
+    "version": "6.5.0",
     "parameters": {
       "effect": {
         "type": "String",
@@ -451,7 +451,7 @@
                           },
                           {
                             "field": "Microsoft.Compute/imageOffer",
-                            "equals": "almalinux"
+                            "like": "almalinux*"
                           },
                           {
                             "anyOf": [
@@ -691,6 +691,7 @@
       }
     },
     "versions": [
+      "6.5.0",
       "6.4.0",
       "6.3.0",
       "6.2.0",