Framework/Configurations/SVT/ControlSettings.json
|
{
"Diagnostics_RetentionPeriod_Min": 365, "Diagnostics_RetentionPeriod_Forever": 0, "KeyVault": { "KeyRotationDuration_Days": 365, "SecretRotationDuration_Days": 180, "KeyType": "RSA-HSM", "ADAppCredentialTypeCrt": "AsymmetricX509Cert", "ADAppCredentialTypePwd": "Password" }, "SqlServer": { "AuditRetentionPeriod_Min": 365, "AuditRetentionPeriod_Forever": 0 }, "AnalysisService": { "Max_Admin_Count": 2 }, "VirtualMachine": { "RDP_Port": 3389, "WinRM_Port": 5985, "Windows_OS_Baseline_Ids": [] }, "NoOfApprovedAdmins": 5, "NoOfClassicAdminsLimit": 2, "WhitelistedMgmtCerts": { "Thumbprints": [], "ApprovedValidityRangeInDays": 732 }, "WhitelistedCustomRBACRoles": [ { "Id": "21d96096-b162-414a-8302-d8354f9d91b2", "Name": "Azure Service Deploy Release Management Contributor" }, { "Id": "9f15f5f5-77bd-413a-aa88-4b9c68b1e7bc", "Name": "GenevaWarmPathResourceContributor" }, { "Id": "7fd64851-3279-459b-b614-e2b2ba760f5b", "Name": "Office DevOps" } ], "RequiredSecurityCenterRecommendations": ["NetworkSecurityGroupMissingOnVm","EncryptionOnVm","InstallAntimalware","VirtualMachinesNsgShouldRestrictTrafficTaskParameters","VulnerabilityAssessmentDeployment"], "UniversalIPRange": "0.0.0.0-255.255.255.255", "IPRangeStartIP": "0.0.0.0", "IPRangeEndIP": "255.255.255.255", "MetricAlert": { "Batch": [ { "Condition": { "DataSource": { "MetricName": "PoolDeleteCompleteEvent" }, "Operator": "GreaterThan", "Threshold": 0, "TimeAggregation": "Total", "WindowsSize": "01:00:00" }, "Status": "Enabled", "Actions": { "SendToServiceOwners": true } }, { "Condition": { "DataSource": { "MetricName": "PoolDeleteStartEvent" }, "Operator": "GreaterThan", "Threshold": 0, "TimeAggregation": "Total", "WindowsSize": "01:00:00" }, "Status": "Enabled", "Actions": { "SendToServiceOwners": true } } ], "Storage": [ { "Condition": { "DataSource": { "MetricName": "AnonymousSuccess" }, "Operator": "GreaterThan", "Threshold": 0, "TimeAggregation": "Total", "WindowsSize": "01:00:00" }, "Status": "Enabled", "Actions": { "SendToServiceOwners": true } } ], "StreamAnalytics": [ { "Condition": { "DataSource": { "MetricName": "AMLCalloutFailedRequests" }, "Operator": "GreaterThan", "Threshold": 0, "TimeAggregation": "Total", "WindowsSize": "00:05:00" }, "Status": "Enabled", "Actions": { "SendToServiceOwners": true } }, { "Condition": { "DataSource": { "MetricName": "Errors" }, "Operator": "GreaterThan", "Threshold": 0, "TimeAggregation": "Total", "WindowsSize": "00:05:00" }, "Status": "Enabled", "Actions": { "SendToServiceOwners": true } } ] }, "StorageKindMapping": [ { "Kind": "BlobStorage", "Services": [ "blob" ], "DiagnosticsLogServices": [ "blob" ] }, { "Kind": "Storage", "Services": [ "blob", "file", "queue", "table" ], "DiagnosticsLogServices": [ "blob", "queue", "table" ] } ], "AppService": { "Backup_RetentionPeriod_Min": 365, "Backup_RetentionPeriod_Forever": 0, "LatestDotNetFrameworkVersionNumber": "v4.0", "Minimum_Instance_Count": 2, "AADAuthAPIVersion": "2016-08-01", "LoadCertAppSettings": "WEBSITE_LOAD_CERTIFICATES" }, "StorageDiagnosticsSkuMapping": [ "StandardGRS", "StandardLRS", "StandardRAGRS" ], "StorageAlertSkuMapping": [ "StandardGRS", "StandardLRS", "StandardRAGRS" ], "StorageGeoRedundantSku": [ "StandardGRS", "StandardRAGRS" ], "RedisCache": { "FirewallApplicableSku": [ "Premium" ], "RDBBackApplicableSku": [ "Premium" ] }, "CosmosDb": { "Firewall": { "IpLimitPerDb": 2048, "IpLimitPerRange": 256 } }, "Automation": { "WebhookValidityInDays": 60 } } |