|
Policy Rule
|
{
"properties": {
"displayName": "Ensure that 'Java version' is the latest, if used as a part of the Web app",
"policyType": "BuiltIn",
"mode": "Indexed",
"description": "Periodically, newer versions are released for Java software either due to security flaws or to include additional functionality. Using the latest Java version for web apps is recommended in order to take advantage of security fixes, if any, and/or new functionalities of the latest version.",
"metadata": {
"version": "1.0.0",
"category": "App Service"
},
"parameters": {
"effect": {
"type": "String",
"metadata": {
"displayName": "Effect",
"description": "Enable or disable the execution of the policy"
},
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"defaultValue": "AuditIfNotExists"
},
"JavaLatestVersion": {
"type": "String",
"metadata": {
"displayName": "Latest Java version",
"description": "Latest supported Java version for App Services"
},
"defaultValue": "11"
}
},
"policyRule": {
"if": {
"allOf": [
{
"field": "type",
"equals": "Microsoft.Web/sites"
},
{
"field": "kind",
"like": "app*"
}
]
},
"then": {
"effect": "[parameters('effect')]",
"details": {
"type": "Microsoft.Web/sites/config",
"name": "web",
"existenceCondition": {
"anyOf": [
{
"allOf": [
{
"field": "Microsoft.Web/sites/config/web.linuxFxVersion",
"notContains": "JAVA"
},
{
"field": "Microsoft.Web/sites/config/web.javaVersion",
"equals": ""
}
]
},
{
"allOf": [
{
"field": "Microsoft.Web/sites/config/web.linuxFxVersion",
"like": "[concat('*', parameters('JavaLatestVersion'))]"
},
{
"field": "Microsoft.Web/sites/config/web.javaVersion",
"equals": ""
}
]
},
{
"allOf": [
{
"field": "Microsoft.Web/sites/config/web.linuxFxVersion",
"equals": ""
},
{
"field": "Microsoft.Web/sites/config/web.javaVersion",
"like": "[concat(parameters('JavaLatestVersion'), '*')]"
}
]
}
]
}
}
}
}
},
"id": "/providers/Microsoft.Authorization/policyDefinitions/496223c3-ad65-4ecd-878a-bae78737e9ed",
"type": "Microsoft.Authorization/policyDefinitions",
"name": "496223c3-ad65-4ecd-878a-bae78737e9ed"
}
|