AzPolicyAdvertizer

last sync: 2021-Aug-04 14:59:26 UTC

Azure Policy definition

Application Insights components should block log ingestion and querying from public networks

Name Application Insights components should block log ingestion and querying from public networks
Azure Portal
Id 1bc02227-0cb6-4e11-8f53-eb0b22eab7e8
Version 1.0.0
details on versioning
Category Monitoring
Microsoft docs
Description Improve Application Insights security by blocking log ingestion and querying from public networks. Only private-link connected networks will be able to ingest and query logs of this component. Learn more at https://aka.ms/AzMonPrivateLink#configure-application-insights.
Mode Indexed
Type BuiltIn
Preview FALSE
Deprecated FALSE
Effect Default: audit
Allowed: (audit, deny, disabled)
Used RBAC Role none
History
Date/Time (UTC ymd) (i) Change type Change detail
2021-05-11 14:06:18 add 1bc02227-0cb6-4e11-8f53-eb0b22eab7e8
Used in Initiatives none
JSON 
{
  "properties": {
    "displayName": "Application Insights components should block log ingestion and querying from public networks",
    "policyType": "BuiltIn",
    "mode": "Indexed",
    "description": "Improve Application Insights security by blocking log ingestion and querying from public networks. Only private-link connected networks will be able to ingest and query logs of this component. Learn more at https://aka.ms/AzMonPrivateLink#configure-application-insights.",
    "metadata": {
      "version": "1.0.0",
      "category": "Monitoring"
    },
    "parameters": {
      "effect": {
        "type": "String",
        "metadata": {
          "displayName": "Effect",
          "description": "The effect determines what happens when the policy rule is evaluated to match"
        },
        "allowedValues": [
          "audit",
          "deny",
          "disabled"
        ],
        "defaultValue": "audit"
      }
    },
    "policyRule": {
      "if": {
        "allOf": [
          {
            "field": "type",
            "equals": "Microsoft.Insights/components"
          },
          {
            "anyOf": [
              {
                "field": "Microsoft.Insights/components/publicNetworkAccessForIngestion",
                "notEquals": "disabled"
              },
              {
                "field": "Microsoft.Insights/components/publicNetworkAccessForQuery",
                "notEquals": "disabled"
              }
            ]
          }
        ]
      },
      "then": {
      "effect": "[parameters('effect')]"
      }
    }
  },
  "id": "/providers/Microsoft.Authorization/policyDefinitions/1bc02227-0cb6-4e11-8f53-eb0b22eab7e8",
  "type": "Microsoft.Authorization/policyDefinitions",
  "name": "1bc02227-0cb6-4e11-8f53-eb0b22eab7e8"
}