last sync: 2021-Jul-23 16:37:57 UTC

Azure Policy definition

Log Analytics agent should be installed on your Cloud Services (extended support) role instances

Name Log Analytics agent should be installed on your Cloud Services (extended support) role instances
Azure Portal
Id 15fdbc87-8a47-4ee9-a2aa-9a2ea1f37554
Version 2.0.0
details on versioning
Category Security Center
Microsoft docs
Description Security Center collects data from your Cloud Services (extended support) role instances to monitor for security vulnerabilities and threats.
Mode Indexed
Type BuiltIn
Preview FALSE
Deprecated FALSE
Effect Default: AuditIfNotExists
Allowed: (AuditIfNotExists, Disabled)
Used RBAC Role none
History
Date/Time (UTC ymd) (i) Change type Change detail
2021-06-02 22:44:52 change Major (1.0.0 > 2.0.0)
2021-04-27 15:38:15 add 15fdbc87-8a47-4ee9-a2aa-9a2ea1f37554
Used in Initiatives none
JSON Changes

JSON
{
  "properties": {
    "displayName": "Log Analytics agent should be installed on your Cloud Services (extended support) role instances",
    "policyType": "BuiltIn",
    "mode": "Indexed",
    "description": "Security Center collects data from your Cloud Services (extended support) role instances to monitor for security vulnerabilities and threats.",
    "metadata": {
      "version": "2.0.0",
      "category": "Security Center"
    },
    "parameters": {
      "effect": {
        "type": "String",
        "metadata": {
          "displayName": "Effect",
          "description": "Enable or disable the execution of the policy"
        },
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "defaultValue": "AuditIfNotExists"
      }
    },
    "policyRule": {
      "if": {
        "field": "type",
        "equals": "Microsoft.Compute/cloudServices"
      },
      "then": {
      "effect": "[parameters('effect')]",
        "details": {
          "type": "Microsoft.Security/assessments",
          "name": "45cfe080-ceb1-a91e-9743-71551ed24e94",
          "existenceCondition": {
            "field": "Microsoft.Security/assessments/status.code",
            "in": [
              "NotApplicable",
              "Healthy"
            ]
          }
        }
      }
    }
  },
  "id": "/providers/Microsoft.Authorization/policyDefinitions/15fdbc87-8a47-4ee9-a2aa-9a2ea1f37554",
  "type": "Microsoft.Authorization/policyDefinitions",
  "name": "15fdbc87-8a47-4ee9-a2aa-9a2ea1f37554"
}