|
Policy Rule
|
{
"properties": {
"displayName": "Ensure that 'PHP version' is the latest, if used as a part of the Api app",
"policyType": "BuiltIn",
"mode": "Indexed",
"description": "Periodically, newer versions are released for PHP software either due to security flaws or to include additional functionality. Using the latest PHP version for API apps is recommended in order to take advantage of security fixes, if any, and/or new functionalities of the latest version.",
"metadata": {
"version": "1.0.0",
"category": "App Service"
},
"parameters": {
"effect": {
"type": "String",
"metadata": {
"displayName": "Effect",
"description": "Enable or disable the execution of the policy"
},
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"defaultValue": "AuditIfNotExists"
},
"PHPLatestVersion": {
"type": "String",
"metadata": {
"displayName": "Latest PHP version",
"description": "Latest supported PHP version for App Services"
},
"defaultValue": "7.3"
}
},
"policyRule": {
"if": {
"allOf": [
{
"field": "type",
"equals": "Microsoft.Web/sites"
},
{
"field": "kind",
"like": "*api"
}
]
},
"then": {
"effect": "[parameters('effect')]",
"details": {
"type": "Microsoft.Web/sites/config",
"name": "web",
"existenceCondition": {
"anyOf": [
{
"allOf": [
{
"field": "Microsoft.Web/sites/config/web.linuxFxVersion",
"notContains": "PHP"
},
{
"field": "Microsoft.Web/sites/config/web.phpVersion",
"equals": ""
}
]
},
{
"allOf": [
{
"field": "Microsoft.Web/sites/config/web.linuxFxVersion",
"equals": "[concat('PHP|', parameters('PHPLatestVersion'))]"
},
{
"field": "Microsoft.Web/sites/config/web.phpVersion",
"equals": ""
}
]
},
{
"allOf": [
{
"field": "Microsoft.Web/sites/config/web.linuxFxVersion",
"equals": ""
},
{
"field": "Microsoft.Web/sites/config/web.phpVersion",
"equals": "[parameters('PHPLatestVersion')]"
}
]
}
]
}
}
}
}
},
"id": "/providers/Microsoft.Authorization/policyDefinitions/1bc1795e-d44a-4d48-9b3b-6fff0fd5f9ba",
"type": "Microsoft.Authorization/policyDefinitions",
"name": "1bc1795e-d44a-4d48-9b3b-6fff0fd5f9ba"
}
|