AzPolicyAdvertizer

last sync: 2025-Oct-27 18:23:28 UTC

Azure NetApp Files Volumes of type NFSv4.1 should use Kerberos data integrity or data privacy

Azure BuiltIn Policy definition

Source Azure Portal
Display name Azure NetApp Files Volumes of type NFSv4.1 should use Kerberos data integrity or data privacy
Id 16f4af95-96b1-4220-805a-367ca59cd72e
Version 1.0.0
Details on versioning
Versioning Versions supported for Versioning: 1
1.0.0
Built-in Versioning [Preview]
Category Storage
Microsoft Learn
Description Ensure that at least either Kerberos integrity (krb5i) or Kerberos privacy (krb5p) is selected to ensure data integrity and data privacy.
Cloud environments AzureCloud = true
AzureUSGovernment = true
AzureChinaCloud = unknown
Available in AzUSGov The Policy is available in AzureUSGovernment cloud. Version: '1.0.0'
Repository: Azure-Policy 16f4af95-96b1-4220-805a-367ca59cd72e
Mode All
Type BuiltIn
Preview False
Deprecated False
Effect Default
Audit
Allowed
Audit, Deny, Disabled
RBAC role(s) none
Rule aliases IF (9)
Alias Namespace ResourceType Path PathIsDefault DefaultPath Modifiable
Microsoft.NetApp/netAppAccounts/capacityPools/volumes/exportPolicy.rules[*] Microsoft.NetApp netAppAccounts/capacityPools/volumes properties.exportPolicy.rules[*] True False
Microsoft.NetApp/netAppAccounts/capacityPools/volumes/exportPolicy.rules[*].kerberos5iReadOnly Microsoft.NetApp netAppAccounts/capacityPools/volumes properties.exportPolicy.rules[*].kerberos5iReadOnly True False
Microsoft.NetApp/netAppAccounts/capacityPools/volumes/exportPolicy.rules[*].kerberos5iReadWrite Microsoft.NetApp netAppAccounts/capacityPools/volumes properties.exportPolicy.rules[*].kerberos5iReadWrite True False
Microsoft.NetApp/netAppAccounts/capacityPools/volumes/exportPolicy.rules[*].kerberos5pReadOnly Microsoft.NetApp netAppAccounts/capacityPools/volumes properties.exportPolicy.rules[*].kerberos5pReadOnly True False
Microsoft.NetApp/netAppAccounts/capacityPools/volumes/exportPolicy.rules[*].kerberos5pReadWrite Microsoft.NetApp netAppAccounts/capacityPools/volumes properties.exportPolicy.rules[*].kerberos5pReadWrite True False
Microsoft.NetApp/netAppAccounts/capacityPools/volumes/exportPolicy.rules[*].kerberos5ReadOnly Microsoft.NetApp netAppAccounts/capacityPools/volumes properties.exportPolicy.rules[*].kerberos5ReadOnly True False
Microsoft.NetApp/netAppAccounts/capacityPools/volumes/exportPolicy.rules[*].kerberos5ReadWrite Microsoft.NetApp netAppAccounts/capacityPools/volumes properties.exportPolicy.rules[*].kerberos5ReadWrite True False
Microsoft.NetApp/netAppAccounts/capacityPools/volumes/kerberosEnabled Microsoft.NetApp netAppAccounts/capacityPools/volumes properties.kerberosEnabled True False
Microsoft.NetApp/netAppAccounts/capacityPools/volumes/protocolTypes[*] Microsoft.NetApp netAppAccounts/capacityPools/volumes properties.protocolTypes[*] True False
Rule resource types IF (1)
Compliance Not a Compliance control
Initiatives usage none
History
Date/Time (UTC ymd) (i) Change type Change detail
2022-02-11 18:30:22 add 16f4af95-96b1-4220-805a-367ca59cd72e
JSON compare n/a
JSON
api-version=2021-06-01
EPAC