output/20260723_081532/govviz/ALZ_20260723_081601/Enterprise-Scale/src/resources/Microsoft.Authorization/policySetDefinitions/Enforce-Guardrails-Automation.json
|
{ "name": "Enforce-Guardrails-Automation", "type": "Microsoft.Authorization/policySetDefinitions", "apiVersion": "2023-04-01", "scope": null, "properties": { "policyType": "Custom", "displayName": "Enforce recommended guardrails for Automation Account", "description": "This policy initiative is a group of policies that ensures Automation Account is compliant per regulated Landing Zones.", "metadata": { "version": "1.1.0", "category": "Automation", "source": "https://github.com/Azure/Enterprise-Scale/", "alzCloudEnvironments": [ "AzureCloud", "AzureChinaCloud", "AzureUSGovernment" ] }, "parameters": { "aaModifyLocalAuth": { "type": "string", "defaultValue": "Modify", "allowedValues": [ "Modify", "Disabled" ] }, "aaVariablesEncryption": { "type": "string", "defaultValue": "Deny", "allowedValues": [ "Audit", "Disabled", "Deny" ] }, "aaLocalAuth": { "type": "string", "defaultValue": "Deny", "allowedValues": [ "Audit", "Disabled", "Deny" ] }, "aaManagedIdentity": { "type": "string", "defaultValue": "Audit", "allowedValues": [ "Audit", "Disabled" ] }, "autoHotPatch": { "type": "string", "defaultValue": "Deny", "allowedValues": [ "Audit", "Disabled", "Deny" ] }, "aaModifyPublicNetworkAccess": { "type": "string", "defaultValue": "Modify", "allowedValues": [ "Modify", "Disabled" ] } }, "policyDefinitions": [ { "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6d02d2f7-e38b-4bdc-96f3-adc0a8726abc", "policyDefinitionReferenceId": "Deny-Windows-Vm-HotPatch", "definitionVersion": "1.*.*", "groupNames": [], "parameters": { "effect": { "value": "[[parameters('autoHotPatch')]" } } }, { "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/dea83a72-443c-4292-83d5-54a2f98749c0", "policyDefinitionReferenceId": "Deny-Aa-Managed-Identity", "definitionVersion": "1.*.*", "groupNames": [], "parameters": { "effect": { "value": "[[parameters('aaManagedIdentity')]" } } }, { "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/48c5f1cb-14ad-4797-8e3b-f78ab3f8d700", "policyDefinitionReferenceId": "Deny-Aa-Local-Auth", "definitionVersion": "1.*.*", "groupNames": [], "parameters": { "effect": { "value": "[[parameters('aaLocalAuth')]" } } }, { "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3657f5a0-770e-44a3-b44e-9431ba1e9735", "policyDefinitionReferenceId": "Deny-Aa-Variables-Encrypt", "definitionVersion": "1.*.*", "groupNames": [], "parameters": { "effect": { "value": "[[parameters('aaVariablesEncryption')]" } } }, { "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/30d1d58e-8f96-47a5-8564-499a3f3cca81", "policyDefinitionReferenceId": "Modify-Aa-Local-Auth", "definitionVersion": "1.*.*", "groupNames": [], "parameters": { "effect": { "value": "[[parameters('aaModifyLocalAUth')]" } } }, { "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/23b36a7c-9d26-4288-a8fd-c1d2fa284d8c", "policyDefinitionReferenceId": "Modify-Aa-Public-Network-Access", "definitionVersion": "1.*.*", "groupNames": [], "parameters": { "effect": { "value": "[[parameters('aaModifyPublicNetworkAccess')]" } } } ], "policyDefinitionGroups": null } } |