Files

 main

/

policyDefinitions

/

Copy path

Directory actions

More options

Directory actions

More options

Latest commit

 

History

History

/

policyDefinitions

/

Top

Folders and files

Name		Name	Last commit message	Last commit date
parent directory ..
Append-AppService-httpsonly.json		Append-AppService-httpsonly.json
Append-AppService-latestTLS.json		Append-AppService-latestTLS.json
Append-KV-SoftDelete.json		Append-KV-SoftDelete.json
Append-Redis-disableNonSslPort.json		Append-Redis-disableNonSslPort.json
Append-Redis-sslEnforcement.json		Append-Redis-sslEnforcement.json
Audit-AzureHybridBenefit.json		Audit-AzureHybridBenefit.json
Audit-Disks-UnusedResourcesCostOptimization.json		Audit-Disks-UnusedResourcesCostOptimization.json
Audit-MachineLearning-PrivateEndpointId.json		Audit-MachineLearning-PrivateEndpointId.json
Audit-PrivateLinkDnsZones.json		Audit-PrivateLinkDnsZones.json
Audit-PublicIpAddresses-UnusedResourcesCostOptimization.json		Audit-PublicIpAddresses-UnusedResourcesCostOptimization.json
Audit-ServerFarms-UnusedResourcesCostOptimization.json		Audit-ServerFarms-UnusedResourcesCostOptimization.json
Audit-Tags-Mandatory-Rg.json		Audit-Tags-Mandatory-Rg.json
Audit-Tags-Mandatory.json		Audit-Tags-Mandatory.json
Deny-AA-child-resources.json		Deny-AA-child-resources.json
Deny-AFSPaasPublicIP.AzureChinaCloud.json		Deny-AFSPaasPublicIP.AzureChinaCloud.json
Deny-APIM-TLS.json		Deny-APIM-TLS.json
Deny-AppGW-Without-WAF.json		Deny-AppGW-Without-WAF.json
Deny-AppGw-Without-Tls.json		Deny-AppGw-Without-Tls.json
Deny-AppService-without-BYOC.json		Deny-AppService-without-BYOC.json
Deny-AppServiceApiApp-http.json		Deny-AppServiceApiApp-http.json
Deny-AppServiceFunctionApp-http.json		Deny-AppServiceFunctionApp-http.json
Deny-AppServiceWebApp-http.json		Deny-AppServiceWebApp-http.json
Deny-AzFw-Without-Policy.json		Deny-AzFw-Without-Policy.json
Deny-CognitiveServices-NetworkAcls.json		Deny-CognitiveServices-NetworkAcls.json
Deny-CognitiveServices-Resource-Kinds.json		Deny-CognitiveServices-Resource-Kinds.json
Deny-CognitiveServices-RestrictOutboundNetworkAccess.json		Deny-CognitiveServices-RestrictOutboundNetworkAccess.json
Deny-Databricks-NoPublicIp.json		Deny-Databricks-NoPublicIp.json
Deny-Databricks-Sku.json		Deny-Databricks-Sku.json
Deny-Databricks-VirtualNetwork.json		Deny-Databricks-VirtualNetwork.json
Deny-EH-MINTLS.json		Deny-EH-MINTLS.json
Deny-EH-Premium-CMK.json		Deny-EH-Premium-CMK.json
Deny-FileServices-InsecureAuth.json		Deny-FileServices-InsecureAuth.json
Deny-FileServices-InsecureKerberos.json		Deny-FileServices-InsecureKerberos.json
Deny-FileServices-InsecureSmbChannel.json		Deny-FileServices-InsecureSmbChannel.json
Deny-FileServices-InsecureSmbVersions.json		Deny-FileServices-InsecureSmbVersions.json
Deny-KeyVaultPaasPublicIP.AzureChinaCloud.json		Deny-KeyVaultPaasPublicIP.AzureChinaCloud.json
Deny-LogicApp-Public-Network.json		Deny-LogicApp-Public-Network.json
Deny-LogicApps-Without-Https.json		Deny-LogicApps-Without-Https.json
Deny-MachineLearning-Aks.json		Deny-MachineLearning-Aks.json
Deny-MachineLearning-Compute-SubnetId.json		Deny-MachineLearning-Compute-SubnetId.json
Deny-MachineLearning-Compute-VmSize.json		Deny-MachineLearning-Compute-VmSize.json
Deny-MachineLearning-ComputeCluster-RemoteLoginPortPublicAccess.json		Deny-MachineLearning-ComputeCluster-RemoteLoginPortPublicAccess.json
Deny-MachineLearning-ComputeCluster-Scale.json		Deny-MachineLearning-ComputeCluster-Scale.json
Deny-MachineLearning-HbiWorkspace.json		Deny-MachineLearning-HbiWorkspace.json
Deny-MachineLearning-PublicAccessWhenBehindVnet.json		Deny-MachineLearning-PublicAccessWhenBehindVnet.json
Deny-MachineLearning-PublicNetworkAccess.json		Deny-MachineLearning-PublicNetworkAccess.json
Deny-MgmtPorts-From-Internet.json		Deny-MgmtPorts-From-Internet.json
Deny-MySql-http.json		Deny-MySql-http.json
Deny-PostgreSql-http.json		Deny-PostgreSql-http.json
Deny-Private-DNS-Zones.json		Deny-Private-DNS-Zones.json
Deny-PublicEndpoint-MariaDB.json		Deny-PublicEndpoint-MariaDB.json
Deny-PublicIP.json		Deny-PublicIP.json
Deny-RDP-From-Internet.json		Deny-RDP-From-Internet.json
Deny-Redis-http.json		Deny-Redis-http.json
Deny-Service-Endpoints.json		Deny-Service-Endpoints.json
Deny-Sql-minTLS.json		Deny-Sql-minTLS.json
Deny-SqlMi-minTLS.json		Deny-SqlMi-minTLS.json
Deny-Storage-ContainerDeleteRetentionPolicy.json		Deny-Storage-ContainerDeleteRetentionPolicy.json
Deny-Storage-CopyScope.json		Deny-Storage-CopyScope.json
Deny-Storage-CorsRules.json		Deny-Storage-CorsRules.json
Deny-Storage-LocalUser.json		Deny-Storage-LocalUser.json
Deny-Storage-NetworkAclsBypass.json		Deny-Storage-NetworkAclsBypass.json
Deny-Storage-NetworkAclsVirtualNetworkRules.json		Deny-Storage-NetworkAclsVirtualNetworkRules.json
Deny-Storage-ResourceAccessRulesResourceId.json		Deny-Storage-ResourceAccessRulesResourceId.json
Deny-Storage-ResourceAccessRulesTenantId.json		Deny-Storage-ResourceAccessRulesTenantId.json
Deny-Storage-SFTP.json		Deny-Storage-SFTP.json
Deny-Storage-ServicesEncryption.json		Deny-Storage-ServicesEncryption.json
Deny-Storage-minTLS.json		Deny-Storage-minTLS.json
Deny-StorageAccount-CustomDomain.json		Deny-StorageAccount-CustomDomain.json
Deny-Subnet-Without-Nsg.json		Deny-Subnet-Without-Nsg.json
Deny-Subnet-Without-Penp.json		Deny-Subnet-Without-Penp.json
Deny-Subnet-Without-Udr.json		Deny-Subnet-Without-Udr.json
Deny-UDR-With-Specific-NextHop.json		Deny-UDR-With-Specific-NextHop.json
Deny-VNET-Peer-Cross-Sub.json		Deny-VNET-Peer-Cross-Sub.json
Deny-VNET-Peering-To-Non-Approved-VNETs.json		Deny-VNET-Peering-To-Non-Approved-VNETs.json
Deny-VNet-Peering.json		Deny-VNet-Peering.json
DenyAction-ActivityLogs.json		DenyAction-ActivityLogs.json
DenyAction-DeleteResources.json		DenyAction-DeleteResources.json
DenyAction-DiagnosticLogs.json		DenyAction-DiagnosticLogs.json
Deploy-ASC-SecurityContacts.json		Deploy-ASC-SecurityContacts.json
Deploy-ActivityLogs-to-LA-workspace.AzureChinaCloud.json		Deploy-ActivityLogs-to-LA-workspace.AzureChinaCloud.json
Deploy-Budget.json		Deploy-Budget.json
Deploy-Custom-Route-Table.json		Deploy-Custom-Route-Table.json
Deploy-DDoSProtection.json		Deploy-DDoSProtection.json
Deploy-Default-Udr.AzureChinaCloud.json		Deploy-Default-Udr.AzureChinaCloud.json
Deploy-Default-Udr.AzureUSGovernment.json		Deploy-Default-Udr.AzureUSGovernment.json
Deploy-Diagnostics-AA.json		Deploy-Diagnostics-AA.json
Deploy-Diagnostics-ACI.json		Deploy-Diagnostics-ACI.json
Deploy-Diagnostics-ACR.json		Deploy-Diagnostics-ACR.json
Deploy-Diagnostics-APIMgmt.json		Deploy-Diagnostics-APIMgmt.json
Deploy-Diagnostics-AVDScalingPlans.json		Deploy-Diagnostics-AVDScalingPlans.json
Deploy-Diagnostics-AnalysisService.json		Deploy-Diagnostics-AnalysisService.json
Deploy-Diagnostics-ApiForFHIR.json		Deploy-Diagnostics-ApiForFHIR.json
Deploy-Diagnostics-ApplicationGateway.json		Deploy-Diagnostics-ApplicationGateway.json
Deploy-Diagnostics-Bastion.json		Deploy-Diagnostics-Bastion.json
Deploy-Diagnostics-CDNEndpoints.json		Deploy-Diagnostics-CDNEndpoints.json
Deploy-Diagnostics-CognitiveServices.json		Deploy-Diagnostics-CognitiveServices.json
Deploy-Diagnostics-CosmosDB.json		Deploy-Diagnostics-CosmosDB.json
Deploy-Diagnostics-DLAnalytics.json		Deploy-Diagnostics-DLAnalytics.json
Deploy-Diagnostics-DataExplorerCluster.json		Deploy-Diagnostics-DataExplorerCluster.json
Deploy-Diagnostics-DataFactory.json		Deploy-Diagnostics-DataFactory.json
Deploy-Diagnostics-Databricks.json		Deploy-Diagnostics-Databricks.json
Deploy-Diagnostics-EventGridSub.json		Deploy-Diagnostics-EventGridSub.json
Deploy-Diagnostics-EventGridSystemTopic.json		Deploy-Diagnostics-EventGridSystemTopic.json
Deploy-Diagnostics-EventGridTopic.json		Deploy-Diagnostics-EventGridTopic.json
Deploy-Diagnostics-ExpressRoute.json		Deploy-Diagnostics-ExpressRoute.json
Deploy-Diagnostics-Firewall.json		Deploy-Diagnostics-Firewall.json
Deploy-Diagnostics-FrontDoor.json		Deploy-Diagnostics-FrontDoor.json
Deploy-Diagnostics-Function.json		Deploy-Diagnostics-Function.json
Deploy-Diagnostics-HDInsight.json		Deploy-Diagnostics-HDInsight.json
Deploy-Diagnostics-LoadBalancer.json		Deploy-Diagnostics-LoadBalancer.json
Deploy-Diagnostics-LogAnalytics.json		Deploy-Diagnostics-LogAnalytics.json
Deploy-Diagnostics-LogicAppsISE.json		Deploy-Diagnostics-LogicAppsISE.json
Deploy-Diagnostics-MariaDB.json		Deploy-Diagnostics-MariaDB.json
Deploy-Diagnostics-MediaService.json		Deploy-Diagnostics-MediaService.json
Deploy-Diagnostics-MlWorkspace.json		Deploy-Diagnostics-MlWorkspace.json
Deploy-Diagnostics-MySQL.json		Deploy-Diagnostics-MySQL.json
Deploy-Diagnostics-NIC.json		Deploy-Diagnostics-NIC.json
Deploy-Diagnostics-NetworkSecurityGroups.json		Deploy-Diagnostics-NetworkSecurityGroups.json
Deploy-Diagnostics-PostgreSQL.json		Deploy-Diagnostics-PostgreSQL.json
Deploy-Diagnostics-PowerBIEmbedded.json		Deploy-Diagnostics-PowerBIEmbedded.json
Deploy-Diagnostics-RedisCache.json		Deploy-Diagnostics-RedisCache.json
Deploy-Diagnostics-Relay.json		Deploy-Diagnostics-Relay.json
Deploy-Diagnostics-SQLElasticPools.json		Deploy-Diagnostics-SQLElasticPools.json
Deploy-Diagnostics-SQLMI.json		Deploy-Diagnostics-SQLMI.json
Deploy-Diagnostics-SignalR.json		Deploy-Diagnostics-SignalR.json
Deploy-Diagnostics-TimeSeriesInsights.json		Deploy-Diagnostics-TimeSeriesInsights.json
Deploy-Diagnostics-TrafficManager.json		Deploy-Diagnostics-TrafficManager.json
Deploy-Diagnostics-VM.json		Deploy-Diagnostics-VM.json
Deploy-Diagnostics-VMSS.json		Deploy-Diagnostics-VMSS.json
Deploy-Diagnostics-VNetGW.json		Deploy-Diagnostics-VNetGW.json
Deploy-Diagnostics-VWanS2SVPNGW.json		Deploy-Diagnostics-VWanS2SVPNGW.json
Deploy-Diagnostics-VirtualNetwork.json		Deploy-Diagnostics-VirtualNetwork.json
Deploy-Diagnostics-WVDAppGroup.json		Deploy-Diagnostics-WVDAppGroup.json
Deploy-Diagnostics-WVDHostPools.json		Deploy-Diagnostics-WVDHostPools.json
Deploy-Diagnostics-WVDWorkspace.json		Deploy-Diagnostics-WVDWorkspace.json
Deploy-Diagnostics-WebServerFarm.json		Deploy-Diagnostics-WebServerFarm.json
Deploy-Diagnostics-Website.json		Deploy-Diagnostics-Website.json
Deploy-Diagnostics-iotHub.json		Deploy-Diagnostics-iotHub.json
Deploy-FirewallPolicy.json		Deploy-FirewallPolicy.json
Deploy-LogicApp-TLS.json		Deploy-LogicApp-TLS.json
Deploy-MDFC-Arc-SQL-DCR-Association.json		Deploy-MDFC-Arc-SQL-DCR-Association.json
Deploy-MDFC-Arc-SQL-DefenderSQL-DCR.json		Deploy-MDFC-Arc-SQL-DefenderSQL-DCR.json
Deploy-MDFC-SQL-AMA.json		Deploy-MDFC-SQL-AMA.json
Deploy-MDFC-SQL-DefenderSQL-DCR.json		Deploy-MDFC-SQL-DefenderSQL-DCR.json
Deploy-MDFC-SQL-DefenderSQL.json		Deploy-MDFC-SQL-DefenderSQL.json
Deploy-MySQL-sslEnforcement.json		Deploy-MySQL-sslEnforcement.json
Deploy-MySQLCMKEffect.AzureChinaCloud.json		Deploy-MySQLCMKEffect.AzureChinaCloud.json
Deploy-Nsg-FlowLogs-to-LA.json		Deploy-Nsg-FlowLogs-to-LA.json
Deploy-Nsg-FlowLogs.json		Deploy-Nsg-FlowLogs.json
Deploy-PostgreSQL-sslEnforcement.json		Deploy-PostgreSQL-sslEnforcement.json
Deploy-PostgreSQLCMKEffect.AzureChinaCloud.json		Deploy-PostgreSQLCMKEffect.AzureChinaCloud.json
Deploy-Private-DNS-Azure-File-Sync.AzureChinaCloud.json		Deploy-Private-DNS-Azure-File-Sync.AzureChinaCloud.json
Deploy-Private-DNS-Azure-KeyVault.AzureChinaCloud.json		Deploy-Private-DNS-Azure-KeyVault.AzureChinaCloud.json
Deploy-Private-DNS-Azure-Web.AzureChinaCloud.json		Deploy-Private-DNS-Azure-Web.AzureChinaCloud.json
Deploy-Private-DNS-Generic.json		Deploy-Private-DNS-Generic.json
Deploy-SQL-minTLS.json		Deploy-SQL-minTLS.json
Deploy-Sql-AuditingSettings.json		Deploy-Sql-AuditingSettings.json
Deploy-Sql-SecurityAlertPolicies.json		Deploy-Sql-SecurityAlertPolicies.json
Deploy-Sql-Tde.json		Deploy-Sql-Tde.json
Deploy-Sql-vulnerabilityAssessments.json		Deploy-Sql-vulnerabilityAssessments.json
Deploy-Sql-vulnerabilityAssessments_20230706.json		Deploy-Sql-vulnerabilityAssessments_20230706.json
Deploy-SqlMi-minTLS.json		Deploy-SqlMi-minTLS.json
Deploy-Storage-sslEnforcement.json		Deploy-Storage-sslEnforcement.json
Deploy-UserAssignedManagedIdentity-VMInsights.json		Deploy-UserAssignedManagedIdentity-VMInsights.json
Deploy-VNET-HubSpoke.json		Deploy-VNET-HubSpoke.json
Deploy-Vm-autoShutdown.json		Deploy-Vm-autoShutdown.json
Deploy-Windows-DomainJoin.json		Deploy-Windows-DomainJoin.json
Modify-NSG.json		Modify-NSG.json
Modify-UDR.json		Modify-UDR.json
View all files