last sync: 2025-Apr-29 17:16:02 UTC

[Deprecated]: Azure SignalR Service should use private link

Azure BuiltIn Policy definition

Source Azure Portal
Display name [Deprecated]: Azure SignalR Service should use private link
Id 53503636-bcc9-4748-9663-5348217f160f
Version 1.0.1-deprecated
Details on versioning
Versioning Versions supported for Versioning: 1
1.0.1 (1.0.1-deprecated)
Built-in Versioning [Preview]
Category SignalR
Microsoft Learn
Description The policy is deprecated. Please use /providers/Microsoft.Authorization/policyDefinitions/2393d2cf-a342-44cd-a2e2-fe0188fd1234 instead.
Cloud environments AzureCloud = true
AzureUSGovernment = unknown
AzureChinaCloud = unknown
Available in AzUSGov Unknown, no evidence if Policy definition is/not available in AzureUSGovernment
Assessment(s) Assessments count: 1
Assessment Id: b6f84d18-0137-3176-6aa1-f4d9ac95155c
DisplayName: Azure SignalR Service should use private link
Description: Azure Private Link provides a secure connection between your virtual network and Azure services, eliminating the need for a public IP address.
It manages the connectivity over the Azure backbone network.
By assigning private endpoints to your SignalR resources, you can prevent data leakage risks.
Therefore, we recommend using Azure Private Link for Azure SignalR Service to ensure secure and private connectivity.

Remediation description: To enable private link connections for your Azure SignalR service resource: 1.. Find your SignalR resource in the Azure portal, 2. Navigate to Settings --> Private endpoint connections, 3 Click "+ Private endpoint" to configure the values. Learn more here: https://aka.ms/asrs/privatelink.
Categories: Data
Severity: Medium
preview: True
Mode Indexed
Type BuiltIn
Preview False
Deprecated True
Reference Reference to 1 related Policy definition (taken from description)
Azure SignalR Service should use private link (2393d2cf-a342-44cd-a2e2-fe0188fd1234)
Effect Default
Audit
Allowed
Audit, Deny, Disabled
RBAC role(s) none
Rule aliases IF (2)
Alias Namespace ResourceType Path PathIsDefault DefaultPath Modifiable
Microsoft.SignalRService/SignalR/privateEndpointConnections[*] Microsoft.SignalRService SignalR properties.privateEndpointConnections[*] True False
Microsoft.SignalRService/SignalR/privateEndpointConnections[*].privateLinkServiceConnectionState.status Microsoft.SignalRService SignalR properties.privateEndpointConnections[*].properties.privateLinkServiceConnectionState.status True False
Rule resource types IF (1)
Compliance Not a Compliance control
Initiatives usage none
History
Date/Time (UTC ymd) (i) Change type Change detail
2022-04-29 18:06:01 change Version remains equal, new suffix: deprecated (1.0.1 > 1.0.1-deprecated)
2020-12-11 15:42:52 change Patch (1.0.0 > 1.0.1)
2020-07-01 14:50:07 change Previous DisplayName: [Preview]: Azure SignalR Service should use private links
2020-06-09 16:25:53 add 53503636-bcc9-4748-9663-5348217f160f
JSON compare
compare mode: version left: version right:
JSON
api-version=2021-06-01
EPAC