AzPolicyAdvertizer

last sync: 2025-May-07 18:08:45 UTC

Deploy Microsoft IaaSAntimalware extension for Custom Windows Images

Community Policy definition

Source Repository Community-Policy GitHub
JSON Community-Policy GitHub
Deploy policy 1d954976-e0de-4243-92f2-b210ba4db5d4 (1.0.0) to Azure
Display name Deploy Microsoft IaaSAntimalware extension for Custom Windows Images
Id 1d954976-e0de-4243-92f2-b210ba4db5d4
Version 1.0.0
Details on versioning
Category Compute
Microsoft Learn
Description This policy deploys a Microsoft IaaSAntimalware extension with a default configuration when a VM is not configured with the antimalware extension. This policy is used for custom images.
Mode Indexed
Type Custom Community
Effect Default
DeployIfNotExists
Allowed
DeployIfNotExists, AuditIfNotExists, Disabled
RBAC role(s)
Role Name Role Id
Virtual Machine Contributor 9980e02c-c2be-4d73-94e8-173b1dc7cf3c
Rule aliases IF (1)
Alias Namespace ResourceType Path PathIsDefault DefaultPath Modifiable
Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType Microsoft.Compute virtualMachines properties.storageProfile.osDisk.osType True True
THEN-ExistenceCondition (2)
Alias Namespace ResourceType Path PathIsDefault DefaultPath Modifiable
Microsoft.Compute/virtualMachines/extensions/publisher Microsoft.Compute virtualMachines/extensions properties.publisher True False
Microsoft.Compute/virtualMachines/extensions/type Microsoft.Compute virtualMachines/extensions properties.type True False
Rule resource types IF (1)
Microsoft.Compute/virtualMachines
THEN-Deployment (1)
Microsoft.Compute/virtualMachines/extensions
JSON
EPAC
Deploy policy 1d954976-e0de-4243-92f2-b210ba4db5d4 (1.0.0) to Azure