AzStackHciConnectivity/Targets/AzStackHci.EnvironmentChecker.ARC.Targets.json

[
    {
        "Endpoint": [
            "azgnrelay-eastus-l1.servicebus.windows.net",
            "azgnrelay-westus2-l1.servicebus.windows.net",
            "azgnrelay-southeastasia-l1.servicebus.windows.net",
            "azgnrelay-westeurope-l1.servicebus.windows.net"
        ],
        "Title": "ARC Notification Service",
        "Description": "Notification service for extensions",
        "Severity": "Critical",
        "Protocol": [
            "https"
        ],
        "Tags": {
            "Group": [
                "ReadinessChecks"
            ],
            "Service": [
                "ARC"
            ],
            "OperationType": [
                "Deployment",
                "Update"
            ]
        },
        "Remediation": "https://docs.microsoft.com/en-us/azure/azure-arc/servers/network-requirements#urls",
        "TargetResourceID": null,
        "TargetResourceName": "ARC_Notification_Service_Extensions",
        "TargetResourceType": "Azure Endpoint",
        "AdditionalData": null
    },
    {
        "Endpoint": [
            "management.azure.com"
        ],
        "Title": "Azure Resource Manager",
        "Description": "Azure Resource Manager",
        "Severity": "Critical",
        "Protocol": [
            "https"
        ],
        "Tags": {
            "Group": [
                "ReadinessChecks"
            ],
            "Service": [
                "ARC",
                "ARM"
            ],
            "OperationType": [
                "Deployment",
                "Update"
            ]
        },
        "Remediation": "https://docs.microsoft.com/en-us/azure/azure-arc/servers/network-requirements#urls",
        "TargetResourceID": null,
        "TargetResourceName": "ARC_Azure_Resource_Manager",
        "TargetResourceType": "Azure Endpoint",
        "AdditionalData": null
    },
    {
        "Endpoint": [
            "login.windows.net",
            "login.microsoftonline.com",
            "pas.windows.net"
        ],
        "Title": "Azure Active Directory",
        "Description": "Azure Active Directory",
        "Severity": "Critical",
        "Protocol": [
            "https"
        ],
        "Tags": {
            "Group": [
                "ReadinessChecks"
            ],
            "Service": [
                "ARC",
                "AAD"
            ],
            "OperationType": [
                "Deployment",
                "Update"
            ]
        },
        "Remediation": "https://docs.microsoft.com/en-us/azure/azure-arc/servers/network-requirements#urls",
        "TargetResourceID": null,
        "TargetResourceName": "ARC_Azure_Active_Directory",
        "TargetResourceType": "Azure Active Directory",
        "AdditionalData": null
    },
    {
        "Endpoint": [
            "agentserviceapi.guestconfiguration.azure.com"
        ],
        "Title": "Guest Configuration",
        "Description": "Extension and guest configuration services",
        "Severity": "Critical",
        "Protocol": [
            "https"
        ],
        "Tags": {
            "Group": [
                "ReadinessChecks"
            ],
            "Service": [
                "ARC",
                "AAD"
            ],
            "OperationType": [
                "Deployment",
                "Workload"
            ]
        },
        "Remediation": "https://docs.microsoft.com/en-us/azure/azure-arc/servers/network-requirements#urls",
        "TargetResourceID": null,
        "TargetResourceName": "ARC_Guest_Config",
        "TargetResourceType": "Azure Endpoint",
        "AdditionalData": null
    },
    {
        "Endpoint": [
            "gbl.his.arc.azure.com"
        ],
        "Title": "Metadata and Hybrid Identity",
        "Description": "Metadata and hybrid identity services",
        "Severity": "Critical",
        "Protocol": [
            "https"
        ],
        "Tags": {
            "Group": [
                "ReadinessChecks"
            ],
            "Service": [
                "ARC"
            ],
            "OperationType": [
                "Deployment",
                "Workload"
            ]
        },
        "Remediation": "https://docs.microsoft.com/en-us/azure/azure-arc/servers/network-requirements#urls",
        "TargetResourceID": null,
        "TargetResourceName": "ARC_Metadata_Hybrid_Identity",
        "TargetResourceType": "Azure Endpoint",
        "AdditionalData": null
    },
    {
        "Endpoint": [
            "download.microsoft.com"
        ],
        "Title": "Windows installation package download",
        "Description": "Windows installation package download",
        "Severity": "Critical",
        "Protocol": [
            "https"
        ],
        "Tags": {
            "Group": [
                "ReadinessChecks"
            ],
            "Service": [
                "ARC"
            ],
            "OperationType": [
                "Deployment",
                "Workload"
            ]
        },
        "Remediation": "https://docs.microsoft.com/en-us/azure/azure-arc/servers/network-requirements#urls",
        "TargetResourceID": null,
        "TargetResourceName": "ARC_Windows_Package_Download",
        "TargetResourceType": "Azure Endpoint",
        "AdditionalData": null
    },
    {
        "Endpoint": [
            "aka.ms"
        ],
        "Title": "Installation Download Script",
        "Description": "Installation Download Script",
        "Severity": "Critical",
        "Protocol": [
            "https"
        ],
        "Tags": {
            "Group": [
                "ReadinessChecks"
            ],
            "Service": [
                "ARC"
            ],
            "OperationType": [
                "Deployment",
                "Workload"
            ]
        },
        "Remediation": "https://docs.microsoft.com/en-us/azure/azure-arc/servers/network-requirements#urls",
        "TargetResourceID": null,
        "TargetResourceName": "ARC_Installation_Download_Script",
        "TargetResourceType": "Azure Endpoint",
        "AdditionalData": null
    },
    {
        "Endpoint": [
            "arcscvmm.blob.core.windows.net"
        ],
        "Title": "Azure Arc-enabled Servers Extensions",
        "Description": "Download source for Azure Arc-enabled servers extensions",
        "Severity": "Critical",
        "Protocol": [
            "https"
        ],
        "Tags": {
            "Group": [
                "ReadinessChecks"
            ],
            "Service": [
                "ARC",
                "AAD"
            ],
            "OperationType": [
                "Deployment",
                "Workload"
            ]
        },
        "Remediation": "https://docs.microsoft.com/en-us/azure/azure-arc/servers/network-requirements#urls",
        "TargetResourceID": null,
        "TargetResourceName": "ARC_Server_Extensions",
        "TargetResourceType": "Azure Endpoint",
        "AdditionalData": null
    },
    {
        "Endpoint": [
            "dc.services.visualstudio.com"
        ],
        "Title": "Agent telemetry",
        "Description": "Agent telemetry",
        "Severity": "Warning",
        "Protocol": [
            "https"
        ],
        "Tags": {
            "Group": [
                "ReadinessChecks"
            ],
            "Service": [
                "ARC"
            ],
            "OperationType": [
                "Deployment",
                "Workload",
                "Telemetry"
            ]
        },
        "Remediation": "https://docs.microsoft.com/en-us/azure/azure-arc/servers/network-requirements#urls",
        "TargetResourceID": null,
        "TargetResourceName": "ARC_Agent_Telemetry",
        "TargetResourceType": "Azure Endpoint",
        "AdditionalData": null
    },
    {
        "Endpoint": [
            "guestnotificationservice.azure.com"
        ],
        "Title": "Guest Notification service",
        "Description": "Guest Notification service",
        "Severity": "Critical",
        "Protocol": [
            "https"
        ],
        "Tags": {
            "Group": [
                "ReadinessChecks"
            ],
            "Service": [
                "ARC"
            ],
            "OperationType": [
                "Deployment",
                "Workload"
            ]
        },
        "Remediation": "https://docs.microsoft.com/en-us/azure/azure-arc/servers/network-requirements#urls",
        "TargetResourceID": null,
        "TargetResourceName": "ARC_Notification_Service",
        "TargetResourceType": "Azure Endpoint",
        "AdditionalData": null
    },
    {
        "Endpoint": [
            "gbl.his.arc.azure.com"
        ],
        "Title": "Azure Arc Identity service",
        "Description": "Azure Arc Identity service",
        "Severity": "Critical",
        "Protocol": [
            "https"
        ],
        "Tags": {
            "Group": [
                "ReadinessChecks"
            ],
            "Service": [
                "ARC"
            ],
            "OperationType": [
                "Workload"
            ]
        },
        "Remediation": "https://docs.microsoft.com/en-us/azure/azure-arc/resource-bridge/overview#networking",
        "TargetResourceID": null,
        "TargetResourceName": "ARC_ResourceBridge_Identity_Service",
        "TargetResourceType": "Azure Endpoint",
        "AdditionalData": null
    },
    {
        "Endpoint": [
            "mcr.microsoft.com"
        ],
        "Title": "Microsoft Container Registry",
        "Description": "Microsoft Container Registry",
        "Severity": "Critical",
        "Protocol": [
            "https"
        ],
        "Tags": {
            "Group": [
                "ReadinessChecks"
            ],
            "Service": [
                "ARC"
            ],
            "OperationType": [
                "Workload"
            ]
        },
        "Remediation": "https://docs.microsoft.com/en-us/azure/azure-arc/resource-bridge/overview#networking",
        "TargetResourceID": null,
        "TargetResourceName": "ARC_ResourceBridge_Container_Registry",
        "TargetResourceType": "Azure Endpoint",
        "AdditionalData": null
    },
    {
        "Endpoint": [
            "westus.dp.kubernetesconfiguration.azure.com",
            "westus2.dp.kubernetesconfiguration.azure.com",
            "westus3.dp.kubernetesconfiguration.azure.com"
        ],
        "Title": "Azure Arc Configuration Service",
        "Description": "Azure Arc configuration service",
        "Severity": "Critical",
        "Protocol": [
            "https"
        ],
        "Tags": {
            "Group": [
                "ReadinessChecks"
            ],
            "Service": [
                "ARC"
            ],
            "OperationType": [
                "Workload"
            ]
        },
        "Remediation": "https://docs.microsoft.com/en-us/azure/azure-arc/resource-bridge/overview#networking",
        "TargetResourceID": null,
        "TargetResourceName": "ARC_ResourceBridge_Configuration_Service",
        "TargetResourceType": "Azure Endpoint",
        "AdditionalData": null
    },
    {
        "Endpoint": [
            "guestnotificationservice.azure.com"
        ],
        "Title": "Guest Notification service",
        "Description": "Guest Notification service",
        "Severity": "Critical",
        "Protocol": [
            "https"
        ],
        "Tags": {
            "Group": [
                "ReadinessChecks"
            ],
            "Service": [
                "ARC"
            ],
            "OperationType": [
                "Deployment",
                "Workload"
            ]
        },
        "Remediation": "https://docs.microsoft.com/en-us/azure/azure-arc/servers/network-requirements#urls",
        "TargetResourceID": null,
        "TargetResourceName": "ARC_ResourceBridge_Guest_Notification_Service",
        "TargetResourceType": "Azure Endpoint",
        "AdditionalData": null
    },
    {
        "Endpoint": [
            "ecpacr.azurecr.io"
        ],
        "Protocol": [
            "https"
        ],
        "Title": "Resource bridge container image download",
        "Description": "Resource bridge container image download",
        "Severity": "Critical",
        "Tags": {
            "Group": [
                "ReadinessChecks"
            ],
            "Service": [
                "ARC"
            ],
            "OperationType": [
                "Workload"
            ]
        },
        "Remediation": "https://docs.microsoft.com/en-us/azure-stack/hci/concepts/firewall-requirements#connectivity-recommendations",
        "TargetResourceID": null,
        "TargetResourceName": "ARC_ResourceBridge_Container_Image_Download",
        "TargetResourceType": "Kubernetes",
        "AdditionalData": null
    },
    {
        "Endpoint": [
            "azurearcfork8sdev.azurecr.io"
        ],
        "Protocol": [
            "https"
        ],
        "Title": "Azure Arc for K8s container image download",
        "Description": "Azure Arc for K8s container image download",
        "Severity": "Critical",
        "Tags": {
            "Group": [
                "ReadinessChecks"
            ],
            "Service": [
                "ARC"
            ],
            "OperationType": [
                "Workload"
            ]
        },
        "Remediation": "https://docs.microsoft.com/en-us/azure-stack/hci/concepts/firewall-requirements#connectivity-recommendations",
        "TargetResourceID": null,
        "TargetResourceName": "ARC_ResourceBridge_K8Container_Image_Download",
        "TargetResourceType": "Kubernetes",
        "AdditionalData": null
    }
]