output/20260723_081532/govviz/ALZ_20260723_081601/Enterprise-Scale/src/resources/Microsoft.Authorization/policySetDefinitions/Enforce-Guardrails-MachineLearning.json
|
{ "name": "Enforce-Guardrails-MachineLearning", "type": "Microsoft.Authorization/policySetDefinitions", "apiVersion": "2023-04-01", "scope": null, "properties": { "policyType": "Custom", "displayName": "Enforce recommended guardrails for Machine Learning", "description": "This policy initiative is a group of policies that ensures Machine Learning is compliant per regulated Landing Zones.", "metadata": { "version": "1.2.0", "category": "Machine Learning", "source": "https://github.com/Azure/Enterprise-Scale/", "alzCloudEnvironments": [ "AzureCloud", "AzureChinaCloud", "AzureUSGovernment" ] }, "parameters": { "mlUserAssignedIdentity": { "type": "string", "defaultValue": "Deny", "allowedValues": [ "Audit", "Deny", "Disabled" ] }, "mlModifyLocalAuth": { "type": "string", "defaultValue": "Modify", "allowedValues": [ "Modify", "Disabled" ] }, "mlLocalAuth": { "type": "string", "defaultValue": "Deny", "allowedValues": [ "Audit", "Deny", "Disabled" ] }, "mlOutdatedOS": { "type": "string", "defaultValue": "Audit", "allowedValues": [ "Audit", "Disabled" ] }, "mlModifyPublicNetworkAccess": { "type": "string", "defaultValue": "Modify", "allowedValues": [ "Modify", "Disabled" ] }, "mlIdleShutdown": { "type": "string", "defaultValue": "Deny", "allowedValues": [ "Audit", "Deny", "Disabled" ] }, "mlVirtualNetwork": { "type": "string", "defaultValue": "Audit", "allowedValues": [ "Audit", "Disabled" ] }, "mlLegacyMode": { "type": "string", "defaultValue": "Deny", "allowedValues": [ "Audit", "Deny", "Disabled" ] }, "mlPrivateLink": { "type": "string", "defaultValue": "Audit", "allowedValues": [ "Audit", "Disabled" ] }, "mlResourceLogs": { "type": "string", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ] }, "mlAllowedRegistryDeploy": { "type": "string", "defaultValue": "Deny", "allowedValues": [ "Deny", "Disabled" ] }, "mlAllowedModule": { "type": "string", "defaultValue": "enforceSetting", "allowedValues": [ "enforceSetting", "disabled" ] }, "mlAllowedPython": { "type": "string", "defaultValue": "enforceSetting", "allowedValues": [ "enforceSetting", "disabled" ] }, "mlAllowedRegistries": { "type": "string", "defaultValue": "enforceSetting", "allowedValues": [ "enforceSetting", "disabled" ] } }, "policyDefinitions": [ { "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f110a506-2dcb-422e-bcea-d533fc8c35e2", "policyDefinitionReferenceId": "Deny-ML-Outdated-Os", "definitionVersion": "1.*.*", "groupNames": [], "parameters": { "effects": { "value": "[[parameters('mlOutdatedOS')]" } } }, { "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e96a9a5f-07ca-471b-9bc5-6a0f33cbd68f", "policyDefinitionReferenceId": "Deny-ML-Local-Auth", "definitionVersion": "2.*.*", "groupNames": [], "parameters": { "effect": { "value": "[[parameters('mlLocalAuth')]" } } }, { "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a6f9a2d0-cff7-4855-83ad-4cd750666512", "policyDefinitionReferenceId": "Modify-ML-Local-Auth", "definitionVersion": "2.*.*", "groupNames": [], "parameters": { "effect": { "value": "[[parameters('mlModifyLocalAuth')]" } } }, { "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5f0c7d88-c7de-45b8-ac49-db49e72eaa78", "policyDefinitionReferenceId": "Deny-ML-User-Assigned-Identity", "definitionVersion": "1.*.*", "groupNames": [], "parameters": { "effect": { "value": "[[parameters('mlUserAssignedIdentity')]" } } }, { "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a10ee784-7409-4941-b091-663697637c0f", "policyDefinitionReferenceId": "Modify-ML-Public-Network-Access", "definitionVersion": "1.*.*", "groupNames": [], "parameters": { "effect": { "value": "[[parameters('mlModifyPublicNetworkAccess')]" } } }, { "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/679ddf89-ab8f-48a5-9029-e76054077449", "policyDefinitionReferenceId": "Deny-ML-Idle-Shutdown", "definitionVersion": "1.*.*", "groupNames": [], "parameters": { "effect": { "value": "[[parameters('mlIdleShutdown')]" } } }, { "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7804b5c7-01dc-4723-969b-ae300cc07ff1", "policyDefinitionReferenceId": "Audit-ML-Virtual-Network", "definitionVersion": "1.*.*", "groupNames": [], "parameters": { "effect": { "value": "[[parameters('mlVirtualNetwork')]" } } }, { "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e413671a-dd10-4cc1-a943-45b598596cb7", "policyDefinitionReferenceId": "Deny-ML-Legacy-Mode", "definitionVersion": "1.*.*", "groupNames": [], "parameters": { "effect": { "value": "[[parameters('mlLegacyMode')]" } } }, { "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/45e05259-1eb5-4f70-9574-baf73e9d219b", "policyDefinitionReferenceId": "Audit-ML-Private-Link", "definitionVersion": "1.*.*", "groupNames": [], "parameters": { "effect": { "value": "[[parameters('mlPrivateLink')]" } } }, { "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/afe0c3be-ba3b-4544-ba52-0c99672a8ad6", "policyDefinitionReferenceId": "Aine-ML-Resource-Logs", "definitionVersion": "1.*.*", "groupNames": [], "parameters": { "effect": { "value": "[[parameters('mlResourceLogs')]" } } }, { "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/19539b54-c61e-4196-9a38-67598701be90", "policyDefinitionReferenceId": "Deny-ML-Allowed-Registry-Deploy", "definitionVersion": "1.*.*-preview", "groupNames": [], "parameters": { "effect": { "value": "[[parameters('mlAllowedRegistryDeploy')]" } } }, { "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/53c70b02-63dd-11ea-bc55-0242ac130003", "policyDefinitionReferenceId": "Deny-ML-Allowed-Module", "definitionVersion": "6.*.*-preview", "groupNames": [], "parameters": { "effect": { "value": "[[parameters('mlAllowedModule')]" } } }, { "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/77eeea86-7e81-4a7d-9067-de844d096752", "policyDefinitionReferenceId": "Deny-ML-Allowed-Python", "definitionVersion": "5.*.*-preview", "groupNames": [], "parameters": { "effect": { "value": "[[parameters('mlAllowedPython')]" } } }, { "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5853517a-63de-11ea-bc55-0242ac130003", "policyDefinitionReferenceId": "Deny-ML-Allowed-Registries", "definitionVersion": "6.*.*-preview", "groupNames": [], "parameters": { "effect": { "value": "[[parameters('mlAllowedRegistries')]" } } } ], "policyDefinitionGroups": null } } |