AzPolicyAdvertizer

last sync: 2025-Aug-12 17:23:12 UTC

Function apps should use an Azure file share for its content directory

Azure BuiltIn Policy definition

-Source
+ Azure Portal
-Display name
+Function apps should use an Azure file share for its content directory
-Id
+d0bc837-6eff-477e-9ecd-33bf8d4212a5
-Version
+.0.0
  Details on versioning
-Versioning
+                        Versions supported for Versioning: 1
3.0.0
                         Built-in Versioning [Preview]
-Category
+App Service
 Microsoft Learn
-Description
+The content directory of a Function app should be located on an Azure file share. The storage account information for the file share must be provided before any publishing activity. To learn more about using Azure Files for hosting app service content refer to https://go.microsoft.com/fwlink/?linkid=2151594.
-Cloud environments
+AzureCloud = true
AzureUSGovernment = unknown
AzureChinaCloud = unknown
-Available in AzUSGov
+Unknown, no evidence if Policy definition is/not available in AzureUSGovernment
-Mode
+Indexed
-Type
+BuiltIn
-Preview
+                False
-Deprecated
+False
-Effect
+                Default
Audit

                Allowed
Audit, Disabled
-RBAC role(s)
+                            none
-Rule aliases
+IF (1)


                    
                        Alias
                        Namespace
                        ResourceType
                        Path
                        PathIsDefault
                        DefaultPath
                        Modifiable
                    
                            
                                Microsoft.Web/sites/storageAccountRequired
                                Microsoft.Web
                                sites
                                properties.storageAccountRequired
                                True
                                
                                False
-Alias
+Modifiable
-Microsoft.Web/sites/storageAccountRequired
+False
-Rule resource types
+                IF (1)

                                    Microsoft.Web/sites
-Compliance
+                    Not a Compliance control
-Initiatives usage
+                none
-History
+                                Date/Time (UTC ymd) (i)
                                Change type
                                Change detail
                            
                                                    
                                2022-09-19 17:41:40
                                change
                                Major (2.0.0 > 3.0.0)
                            
                            
                                2022-07-01 16:32:34
                                change
                                Major (1.0.0 > 2.0.0)
                            
                            
                                2021-03-02 15:11:40
                                add
                                4d0bc837-6eff-477e-9ecd-33bf8d4212a5
-Date/Time (UTC ymd) (i)
+Change detail
--09-19 17:41:40
+Major (2.0.0 > 3.0.0)
--07-01 16:32:34
+Major (1.0.0 > 2.0.0)
--03-02 15:11:40
+d0bc837-6eff-477e-9ecd-33bf8d4212a5
-JSON compare
+{
@@ -1,11 +1,11 @@
 {
     "displayName": "Function apps should use an Azure file share for its content directory",
     "policyType": "BuiltIn",
     "mode": "Indexed",
-    "description": "The content directory of a function app should be located on an Azure file share. The storage account information for the file share must be provided before any publishing activity. To learn more about using Azure Files for hosting app service content refer to https://go.microsoft.com/fwlink/?linkid=2151594.",
     "metadata": {
-        "version": "2.0.0",
         "category": "App Service"
     },
     "parameters": {
         "effect": {
@@ -22,48 +22,24 @@
         }
     },
     "policyRule": {
         "if": {
-            "anyOf": [
                 {
-                    "allOf": [
-                        {
-                            "field": "type",
-                            "equals": "Microsoft.Web/sites"
-                        },
-                        {
-                            "field": "kind",
-                            "contains": "functionapp"
-                        },
-                        {
-                            "field": "kind",
-                            "notContains": "workflowapp"
-                        },
-                        {
-                            "field": "Microsoft.Web/sites/storageAccountRequired",
-                            "equals": "true"
-                        }
-                    ]
                 },
                 {
-                    "allOf": [
-                        {
-                            "field": "type",
-                            "equals": "Microsoft.Web/sites/slots"
-                        },
-                        {
-                            "field": "kind",
-                            "contains": "functionapp"
-                        },
-                        {
-                            "field": "kind",
-                            "notContains": "workflowapp"
-                        },
-                        {
-                            "field": "Microsoft.Web/sites/slots/storageAccountRequired",
-                            "equals": "true"
-                        }
-                    ]
                 }
             ]
         },
         "then": {
 {
     "displayName": "Function apps should use an Azure file share for its content directory",
     "policyType": "BuiltIn",
     "mode": "Indexed",
+    "description": "The content directory of a Function app should be located on an Azure file share. The storage account information for the file share must be provided before any publishing activity. To learn more about using Azure Files for hosting app service content refer to https://go.microsoft.com/fwlink/?linkid=2151594.",
     "metadata": {
+        "version": "3.0.0",
         "category": "App Service"
     },
     "parameters": {
         "effect": {
         }
     },
     "policyRule": {
         "if": {
+            "allOf": [
                 {
+                    "field": "type",
+                    "equals": "Microsoft.Web/sites"
                 },
                 {
+                    "field": "kind",
+                    "contains": "functionapp"
+                },
+                {
+                    "field": "kind",
+                    "notContains": "workflowapp"
+                },
+                {
+                    "field": "Microsoft.Web/sites/storageAccountRequired",
+                    "equals": "true"
                 }
             ]
         },
         "then": {
-JSON
+                                api-version=2021-06-01

                                  EPAC
                                
                            
                        
                        
                            
                                {7 itemsdisplayName: "Function apps should use an Azure file share for its content directory",
policyType: "BuiltIn",
mode: "Indexed",
description: "The content directory of a Function app should be located on an Azure file share. The storage account information for the file share must be provided before any publishing activity. To learn more about using Azure Files for hosting app service content refer to https://go.microsoft.com/fwlink/?linkid=2151594.",
metadata: {2 itemsversion: "3.0.0",
category: "App Service"
},
parameters: {1 itemeffect: {4 itemstype: "String",
metadata: {2 itemsdisplayName: "Effect",
description: "Enable or disable the execution of the policy"
},
allowedValues: [2 items"Audit",
"Disabled"
],
defaultValue: "Audit"
}
},
policyRule: {2 itemsif: {1 itemallOf: [4 items{2 itemsfield: "type",
equals: "Microsoft.Web/sites"
},
{2 itemsfield: "kind",
contains: "functionapp"
},
{2 itemsfield: "kind",
notContains: "workflowapp"
},
{2 itemsfield: "Microsoft.Web/sites/storageAccountRequired",
equals: "true"
}
]
},
then: {1 itemeffect: "[parameters('effect')]"
}
}
}
                                 api-version=2021-06-01

                                  EPAC
                                 {7 itemsdisplayName: "Function apps should use an Azure file share for its content directory",
policyType: "BuiltIn",
mode: "Indexed",
description: "The content directory of a Function app should be located on an Azure file share. The storage account information for the file share must be provided before any publishing activity. To learn more about using Azure Files for hosting app service content refer to https://go.microsoft.com/fwlink/?linkid=2151594.",
metadata: {2 itemsversion: "3.0.0",
category: "App Service"
},
parameters: {1 itemeffect: {4 itemstype: "String",
metadata: {2 itemsdisplayName: "Effect",
description: "Enable or disable the execution of the policy"
},
allowedValues: [2 items"Audit",
"Disabled"
],
defaultValue: "Audit"
}
},
policyRule: {2 itemsif: {1 itemallOf: [4 items{2 itemsfield: "type",
equals: "Microsoft.Web/sites"
},
{2 itemsfield: "kind",
contains: "functionapp"
},
{2 itemsfield: "kind",
notContains: "workflowapp"
},
{2 itemsfield: "Microsoft.Web/sites/storageAccountRequired",
equals: "true"
}
]
},
then: {1 itemeffect: "[parameters('effect')]"
}
}
}