config/profiles/security-focus.json
|
{ "profileName": "security-focus", "description": "Security-focused profile. Key Vault, Managed Identity, Defender for Cloud, Microsoft Sentinel, with compute and storage for Defender coverage. Good for security posture baseline testing.", "version": "2.0.0", "modules": { "monitoring": { "enabled": true, "features": { "alertRules": false, "alertEmail": "" } }, "networking": { "enabled": true, "features": { "bastionSku": "Developer", "enableAppGateway": false, "enableFirewall": "None", "enableVpnGateway": false, "enableDdos": false, "enableNatGateway": false, "enablePrivateDnsZones": false } }, "security": { "enabled": true, "features": { "keyVault": true, "managedIdentity": true, "defenderForCloud": true, "sentinel": true, "allowedCidrRanges": [] } }, "compute": { "enabled": true, "features": { "windowsVm": true, "linuxVm": true, "vmss": false, "enableAutoShutdown": false, "vmSku": "Standard_B2s", "domainController": false, "domainName": "" } }, "storage": { "enabled": true, "features": { "dataLakeGen2": false, "enableSoftDelete": false, "enableVersioning": false, "allowedCidrRanges": [] } }, "databases": { "enabled": true, "features": { "sqlDatabase": true, "sqlVm": false, "cosmosDb": false, "postgresql": false, "mysql": false, "redis": false, "allowAllSqlIngress": false } }, "appservices": { "enabled": false }, "containers": { "enabled": false }, "integration": { "enabled": false }, "ai": { "enabled": false }, "data": { "enabled": false }, "governance": { "enabled": true, "features": { "automationAccount": true, "budget": true, "budgetAmount": 200, "resourceLocks": true, "policyAssignments": false, "budgetAlertEmail": "" } } }, "seedDummyData": false } |