output/20260723_081532/govviz/ALZ_20260723_081601/Enterprise-Scale/src/resources/Microsoft.Authorization/policySetDefinitions/Enforce-Guardrails-KeyVault-Sup.json
|
{ "name": "Enforce-Guardrails-KeyVault-Sup", "type": "Microsoft.Authorization/policySetDefinitions", "apiVersion": "2023-04-01", "scope": null, "properties": { "policyType": "Custom", "displayName": "Enforce additional recommended guardrails for Key Vault", "description": "This policy initiative is a group of policies that ensures Key Vault is compliant per regulated Landing Zones.", "metadata": { "version": "1.1.0", "category": "Key Vault", "source": "https://github.com/Azure/Enterprise-Scale/", "alzCloudEnvironments": [ "AzureCloud", "AzureChinaCloud", "AzureUSGovernment" ] }, "parameters": { "keyVaultManagedHsmDisablePublicNetworkModify": { "type": "string", "defaultValue": "Modify", "allowedValues": [ "Modify", "Disabled" ] }, "keyVaultModifyFw": { "type": "string", "defaultValue": "Modify", "allowedValues": [ "Modify", "Disabled" ] } }, "policyDefinitions": [ { "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/84d327c3-164a-4685-b453-900478614456", "policyDefinitionReferenceId": "Modify-KV-PublicNetworkAccess", "definitionVersion": "2.*.*-preview", "groupNames": [], "parameters": { "effect": { "value": "[[parameters('keyVaultManagedHsmDisablePublicNetworkModify')]" } } }, { "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ac673a9a-f77d-4846-b2d8-a57f8e1c01dc", "policyDefinitionReferenceId": "Modify-KV-Fw", "definitionVersion": "1.*.*", "groupNames": [], "parameters": { "effect": { "value": "[[parameters('keyVaultModifyFw')]" } } } ], "policyDefinitionGroups": null } } |