AzPolicyAdvertizer

last sync: 2024-Apr-24 17:46:58 UTC

Configure periodic checking for missing system updates on azure virtual machines

Azure BuiltIn Policy definition

Source Azure Portal
Display name Configure periodic checking for missing system updates on azure virtual machines
Id 59efceea-0c96-497e-a4a1-4eb2290dac15
Version 4.8.0
Details on versioning
Category Azure Update Manager
Microsoft Learn
Description Configure auto-assessment (every 24 hours) for OS updates on native Azure virtual machines. You can control the scope of assignment according to machine subscription, resource group, location or tag. Learn more about this for Windows: https://aka.ms/computevm-windowspatchassessmentmode, for Linux: https://aka.ms/computevm-linuxpatchassessmentmode.
Mode Indexed
Type BuiltIn
Preview False
Deprecated False
Effect Fixed
modify
RBAC role(s)
Role Name Role Id
Contributor b24988ac-6180-42a0-ab88-20f7382dd24c
Rule aliases IF (11)
Alias Namespace ResourceType DefaultPath Modifiable
Microsoft.Compute/imageId Microsoft.Compute
Microsoft.Compute
Microsoft.Compute		 virtualMachines
virtualMachineScaleSets
disks		 properties.storageProfile.imageReference.id
properties.virtualMachineProfile.storageProfile.imageReference.id
properties.creationData.imageReference.id		 false
false
false
Microsoft.Compute/imageOffer Microsoft.Compute
Microsoft.Compute
Microsoft.Compute		 virtualMachines
virtualMachineScaleSets
disks		 properties.storageProfile.imageReference.offer
properties.virtualMachineProfile.storageProfile.imageReference.offer
properties.creationData.imageReference.id		 false
false
false
Microsoft.Compute/imagePublisher Microsoft.Compute
Microsoft.Compute
Microsoft.Compute		 virtualMachines
virtualMachineScaleSets
disks		 properties.storageProfile.imageReference.publisher
properties.virtualMachineProfile.storageProfile.imageReference.publisher
properties.creationData.imageReference.id		 false
false
false
Microsoft.Compute/imageSKU Microsoft.Compute
Microsoft.Compute
Microsoft.Compute		 virtualMachines
virtualMachineScaleSets
disks		 properties.storageProfile.imageReference.sku
properties.virtualMachineProfile.storageProfile.imageReference.sku
properties.creationData.imageReference.id		 false
false
false
Microsoft.Compute/virtualMachines/osProfile.computerName Microsoft.Compute virtualMachines properties.osProfile.computerName true
Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration Microsoft.Compute virtualMachines properties.osProfile.linuxConfiguration true
Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration.patchSettings.assessmentMode Microsoft.Compute virtualMachines properties.osProfile.linuxConfiguration.patchSettings.assessmentMode true
Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration Microsoft.Compute virtualMachines properties.osProfile.windowsConfiguration true
Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration.patchSettings.assessmentMode Microsoft.Compute virtualMachines properties.osProfile.windowsConfiguration.patchSettings.assessmentMode true
Microsoft.Compute/virtualMachines/storageProfile.osDisk.createOption Microsoft.Compute virtualMachines properties.storageProfile.osDisk.createOption true
Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType Microsoft.Compute virtualMachines properties.storageProfile.osDisk.osType true
THEN-Operations (2)
Alias Namespace ResourceType DefaultPath Modifiable
Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration.patchSettings.assessmentMode Microsoft.Compute virtualMachines properties.osProfile.linuxConfiguration.patchSettings.assessmentMode true
Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration.patchSettings.assessmentMode Microsoft.Compute virtualMachines properties.osProfile.windowsConfiguration.patchSettings.assessmentMode true
Rule resource types IF (3)
Microsoft.Compute/galleries
Microsoft.Compute/images
Microsoft.Compute/virtualMachines
Compliance Not a Compliance control
Initiatives usage
Initiative DisplayName Initiative Id Initiative Category State Type
Configure periodic checking for missing system updates on azure virtual machines and Arc-enabled virtual machines Deploy-AUM-CheckUpdates Security Center GA ALZ
Configure periodic checking for missing system updates on azure virtual machines and Arc-enabled virtual machines Deploy-AUM-CheckUpdates Security Center GA ALZ
History
Date/Time (UTC ymd) (i) Change type Change detail
2024-03-11 18:31:50 change Minor (4.7.0 > 4.8.0)
2024-02-20 22:44:08 change Minor (4.5.0 > 4.7.0)
2024-01-24 19:15:51 change Minor (4.4.1 > 4.5.0)
2023-09-18 18:02:04 change Patch, old suffix: preview (4.4.0-preview > 4.4.1)
2023-09-11 17:59:12 change Minor, suffix remains equal (4.3.0-preview > 4.4.0-preview)
2023-08-03 17:56:09 change Minor, suffix remains equal (4.0.0-preview > 4.3.0-preview)
2023-07-25 17:56:05 change Minor, suffix remains equal (4.1.0-preview > 4.0.0-preview)
2023-07-24 17:56:14 change Minor, suffix remains equal (4.0.0-preview > 4.1.0-preview)
2022-12-21 17:43:51 change Major, suffix remains equal (3.0.0-preview > 4.0.0-preview)
2022-10-21 16:42:13 change Major, suffix remains equal (2.0.0-preview > 3.0.0-preview)
2022-04-29 18:06:01 change Major, suffix remains equal (1.0.0-preview > 2.0.0-preview)
2021-10-08 15:47:40 add 59efceea-0c96-497e-a4a1-4eb2290dac15
JSON compare
compare mode: version left: version right:
JSON
api-version=2021-06-01
EPAC