output/20260723_081532/govviz/ALZ_20260723_081601/Enterprise-Scale/src/resources/Microsoft.Authorization/policySetDefinitions/Enforce-Guardrails-BotService.json
|
{ "name": "Enforce-Guardrails-BotService", "type": "Microsoft.Authorization/policySetDefinitions", "apiVersion": "2023-04-01", "scope": null, "properties": { "policyType": "Custom", "displayName": "Enforce recommended guardrails for Bot Service", "description": "This policy initiative is a group of policies that ensures Bot Service is compliant per regulated Landing Zones.", "metadata": { "version": "1.1.0", "category": "Bot Service", "source": "https://github.com/Azure/Enterprise-Scale/", "alzCloudEnvironments": [ "AzureCloud", "AzureChinaCloud", "AzureUSGovernment" ] }, "parameters": { "botServiceValidUri": { "type": "string", "defaultValue": "Deny", "allowedValues": [ "Audit", "audit", "Deny", "deny", "Disabled", "disabled" ] }, "botServiceIsolatedMode": { "type": "string", "defaultValue": "Deny", "allowedValues": [ "Audit", "audit", "Deny", "deny", "Disabled", "disabled" ] }, "botServiceLocalAuth": { "type": "string", "defaultValue": "Deny", "allowedValues": [ "Audit", "Deny", "Disabled" ] }, "botServicePrivateLink": { "type": "string", "defaultValue": "Audit", "allowedValues": [ "Audit", "Disabled" ] } }, "policyDefinitions": [ { "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6164527b-e1ee-4882-8673-572f425f5e0a", "policyDefinitionReferenceId": "Deny-BotService-Valid-Uri", "definitionVersion": "1.*.*", "groupNames": [], "parameters": { "effect": { "value": "[[parameters('botServiceValidUri')]" } } }, { "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/52152f42-0dda-40d9-976e-abb1acdd611e", "policyDefinitionReferenceId": "Deny-BotService-Isolated-Mode", "definitionVersion": "2.*.*", "groupNames": [], "parameters": { "effect": { "value": "[[parameters('botServiceIsolatedMode')]" } } }, { "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ffea632e-4e3a-4424-bf78-10e179bb2e1a", "policyDefinitionReferenceId": "Deny-BotService-Local-Auth", "definitionVersion": "1.*.*", "groupNames": [], "parameters": { "effect": { "value": "[[parameters('botServiceLocalAuth')]" } } }, { "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ad5621d6-a877-4407-aa93-a950b428315e", "policyDefinitionReferenceId": "Audit-BotService-Private-Link", "definitionVersion": "1.*.*", "groupNames": [], "parameters": { "effect": { "value": "[[parameters('botServicePrivateLink')]" } } } ], "policyDefinitionGroups": null } } |