Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Built-in Policy Release bf3a8ec5 #1218

Merged
merged 1 commit into from
Oct 3, 2023
Merged

Built-in Policy Release bf3a8ec5 #1218

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 3 additions & 3 deletions built-in-policies/policyDefinitions/App Configuration/DisableLocalAuth_Audit.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,12 +3,12 @@
"displayName": "App Configuration stores should have local authentication methods disabled",
"policyType": "BuiltIn",
"mode": "Indexed",
"description": "Disabling local authentication methods improves security by ensuring that App Configuration stores require Azure Active Directory identities exclusively for authentication. Learn more at: https://go.microsoft.com/fwlink/?linkid=2161954.",
"description": "Disabling local authentication methods improves security by ensuring that App Configuration stores require Microsoft Entra identities exclusively for authentication. Learn more at: https://go.microsoft.com/fwlink/?linkid=2161954.",
"metadata": {
"version": "1.0.0",
"version": "1.0.1",
"category": "App Configuration"
},
"version": "1.0.0",
"version": "1.0.1",
"parameters": {
"effect": {
"type": "String",
Expand Down
6 changes: 3 additions & 3 deletions built-in-policies/policyDefinitions/App Configuration/DisableLocalAuth_Modify.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,12 +3,12 @@
"displayName": "Configure App Configuration stores to disable local authentication methods",
"policyType": "BuiltIn",
"mode": "Indexed",
"description": "Disable local authentication methods so that your App Configuration stores require Azure Active Directory identities exclusively for authentication. Learn more at: https://go.microsoft.com/fwlink/?linkid=2161954.",
"description": "Disable local authentication methods so that your App Configuration stores require Microsoft Entra identities exclusively for authentication. Learn more at: https://go.microsoft.com/fwlink/?linkid=2161954.",
"metadata": {
"version": "1.0.0",
"version": "1.0.1",
"category": "App Configuration"
},
"version": "1.0.0",
"version": "1.0.1",
"parameters": {
"effect": {
"type": "String",
Expand Down
39 changes: 39 additions & 0 deletions built-in-policies/policyDefinitions/Container Registry/ACR_PTCDisabled_AuditDeny.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,39 @@
{
"properties": {
"displayName": "Container registries should prevent cache rule creation",
"description": "Disable cache rule creation for your Azure Container Registry to prevent pull through cache pulls. Learn more at: https://aka.ms/acr/cache.",
"policyType": "BuiltIn",
"mode": "All",
"metadata": {
"version": "1.0.0",
"category": "Container Registry"
},
"version": "1.0.0",
"parameters": {
"effect": {
"type": "String",
"metadata": {
"displayName": "Effect",
"description": "Enable or disable the execution of the policy"
},
"allowedValues": [
"Audit",
"Deny",
"Disabled"
],
"defaultValue": "Audit"
}
},
"policyRule": {
"if": {
"field": "type",
"equals": "Microsoft.ContainerRegistry/registries/cacheRules"
},
"then": {
"effect": "[parameters('effect')]"
}
}
},
"id": "/providers/Microsoft.Authorization/policyDefinitions/84497762-32b6-4ab3-80b6-732ea48b85a2",
"name": "84497762-32b6-4ab3-80b6-732ea48b85a2"
}
Loading