AzPolicyAdvertizer

last sync: 2021-Jul-23 16:37:57 UTC

Azure Policy definition

Cognitive Services accounts should use customer owned storage

Name Cognitive Services accounts should use customer owned storage
Azure Portal
Id 46aa9b05-0e60-4eae-a88b-1e9d374fa515
Version 2.0.0
details on versioning
Category Cognitive Services
Microsoft docs
Description Use customer owned storage to control the data stored at rest in Cognitive Services. To learn more about customer owned storage, visit https://aka.ms/cogsvc-cmk.
Mode Indexed
Type BuiltIn
Preview FALSE
Deprecated FALSE
Effect Default: Audit
Allowed: (Audit, Deny, Disabled)
Used RBAC Role none
History
Date/Time (UTC ymd) (i) Change type Change detail
2021-03-24 14:32:48 change Major (1.0.0 > 2.0.0)
2020-06-09 16:25:53 add 46aa9b05-0e60-4eae-a88b-1e9d374fa515
Used in Initiatives none
JSON Changes

JSON 
{
  "properties": {
    "displayName": "Cognitive Services accounts should use customer owned storage",
    "policyType": "BuiltIn",
    "mode": "Indexed",
    "description": "Use customer owned storage to control the data stored at rest in Cognitive Services. To learn more about customer owned storage, visit https://aka.ms/cogsvc-cmk.",
    "metadata": {
      "version": "2.0.0",
      "category": "Cognitive Services"
    },
    "parameters": {
      "effect": {
        "type": "String",
        "metadata": {
          "displayName": "Effect",
          "description": "The effect determines what happens when the policy rule is evaluated to match"
        },
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "defaultValue": "Audit"
      }
    },
    "policyRule": {
      "if": {
        "allOf": [
          {
            "field": "type",
            "equals": "Microsoft.CognitiveServices/accounts"
          },
          {
            "count": {
            "field": "Microsoft.CognitiveServices/accounts/userOwnedStorage[*]"
            },
            "less": 1
          },
          {
            "count": {
            "field": "Microsoft.CognitiveServices/accounts/capabilities[*]",
              "where": {
              "field": "Microsoft.CognitiveServices/accounts/capabilities[*].name",
                "equals": "CustomerManagedStorage"
              }
            },
            "greater": 0
          }
        ]
      },
      "then": {
      "effect": "[parameters('effect')]"
      }
    }
  },
  "id": "/providers/Microsoft.Authorization/policyDefinitions/46aa9b05-0e60-4eae-a88b-1e9d374fa515",
  "type": "Microsoft.Authorization/policyDefinitions",
  "name": "46aa9b05-0e60-4eae-a88b-1e9d374fa515"
}