AzPolicyAdvertizer

last sync: 2021-Aug-04 14:59:26 UTC

Azure Policy definition

Managed workspace virtual network on Azure Synapse workspaces should be enabled

Name Managed workspace virtual network on Azure Synapse workspaces should be enabled
Azure Portal
Id 2d9dbfa3-927b-4cf0-9d0f-08747f971650
Version 1.0.0
details on versioning
Category Synapse
Microsoft docs
Description Enabling a managed workspace virtual network ensures that your workspace is network isolated from other workspaces. Data integration and Spark resources deployed in this virtual network also provides user level isolation for Spark activities.
Mode Indexed
Type BuiltIn
Preview FALSE
Deprecated FALSE
Effect Default: Audit
Allowed: (Audit, Deny, Disabled)
Used RBAC Role none
History
Date/Time (UTC ymd) (i) Change type Change detail
2020-11-17 14:39:37 add 2d9dbfa3-927b-4cf0-9d0f-08747f971650
Used in Initiatives none
JSON 
{
  "properties": {
    "displayName": "Managed workspace virtual network on Azure Synapse workspaces should be enabled",
    "policyType": "BuiltIn",
    "mode": "Indexed",
    "description": "Enabling a managed workspace virtual network ensures that your workspace is network isolated from other workspaces. Data integration and Spark resources deployed in this virtual network also provides user level isolation for Spark activities.",
    "metadata": {
      "version": "1.0.0",
      "category": "Synapse"
    },
    "parameters": {
      "effect": {
        "type": "String",
        "metadata": {
          "displayName": "Effect",
          "description": "Enable or disable the execution of the policy"
        },
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "defaultValue": "Audit"
      }
    },
    "policyRule": {
      "if": {
        "allOf": [
          {
            "field": "type",
            "equals": "Microsoft.Synapse/workspaces"
          },
          {
            "field": "Microsoft.Synapse/workspaces/managedVirtualNetwork",
            "notEquals": "default"
          }
        ]
      },
      "then": {
      "effect": "[parameters('effect')]"
      }
    }
  },
  "id": "/providers/Microsoft.Authorization/policyDefinitions/2d9dbfa3-927b-4cf0-9d0f-08747f971650",
  "type": "Microsoft.Authorization/policyDefinitions",
  "name": "2d9dbfa3-927b-4cf0-9d0f-08747f971650"
}