last sync: 2021-Sep-24 16:09:49 UTC

Azure Policy definition

[Deprecated]: Access to App Services should be restricted

Name [Deprecated]: Access to App Services should be restricted
Azure Portal
Id 1a833ff1-d297-4a0f-9944-888428f8e0ff
Version 1.0.0-deprecated
details on versioning
Category Security Center
Microsoft docs
Description Azure security center has discovered that the networking configuration of some of your app services are overly permissive and allow inbound traffic from ranges that are too broad
Mode All
Type BuiltIn
Preview FALSE
Deprecated True
Effect Default: Disabled
Allowed: (AuditIfNotExists, Disabled)
Used RBAC Role none
History
Date/Time (UTC ymd) (i) Change type Change detail
2020-02-25 11:29:35 change Previous DisplayName: [Preview]: Access to App Services should be restricted
Used in Initiatives none
JSON
{
  "displayName": "[Deprecated]: Access to App Services should be restricted",
  "policyType": "BuiltIn",
  "mode": "All",
  "description": "Azure security center has discovered that the networking configuration of some of your app services are overly permissive and allow inbound traffic from ranges that are too broad",
  "metadata": {
    "version": "1.0.0-deprecated",
    "category": "Security Center",
    "deprecated": true
  },
  "parameters": {
    "effect": {
      "type": "String",
      "metadata": {
        "displayName": "Effect",
        "description": "Enable or disable the execution of the policy"
      },
      "allowedValues": [
        "AuditIfNotExists",
        "Disabled"
      ],
      "defaultValue": "Disabled"
    }
  },
  "policyRule": {
    "if": {
      "field": "type",
      "equals": "Microsoft.Web/sites"
    },
    "then": {
      "effect": "[parameters('effect')]",
      "details": {
        "type": "Microsoft.Security/complianceResults",
        "name": "restrictAccessToAppServices",
        "existenceCondition": {
          "field": "Microsoft.Security/complianceResults/resourceStatus",
          "in": [
            "OffByPolicy",
            "Healthy"
          ]
        }
      }
    }
  }
}