AzPolicyAdvertizer

last sync: 2021-Jul-23 16:37:57 UTC

Azure Policy definition

[Deprecated]: Operating system version should be the most current version for your cloud service roles

Name [Deprecated]: Operating system version should be the most current version for your cloud service roles
Azure Portal
Id 5a913c68-0590-402c-a531-e57e19379da3
Version 1.0.0-deprecated
details on versioning
Category Security Center
Microsoft docs
Description Keeping the operating system (OS) on the most recent supported version for your cloud service roles enhances the systems security posture.
Mode All
Type BuiltIn
Preview FALSE
Deprecated True
Effect Default: AuditIfNotExists
Allowed: (AuditIfNotExists, Disabled)
Used RBAC Role none
History
Date/Time (UTC ymd) (i) Change type Change detail
2021-05-04 14:34:06 change Version remains equal, new suffix: deprecated (1.0.0 > 1.0.0-deprecated)
2020-09-09 11:24:03 add 5a913c68-0590-402c-a531-e57e19379da3
Used in Initiatives none
JSON Changes

JSON 
{
  "properties": {
  "displayName": "[Deprecated]: Operating system version should be the most current version for your cloud service roles",
    "policyType": "BuiltIn",
    "mode": "All",
    "description": "Keeping the operating system (OS) on the most recent supported version for your cloud service roles enhances the systems security posture.",
    "metadata": {
      "version": "1.0.0-deprecated",
      "category": "Security Center",
      "deprecated": true
    },
    "parameters": {
      "effect": {
        "type": "String",
        "metadata": {
          "displayName": "Effect",
          "description": "Enable or disable the execution of the policy"
        },
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "defaultValue": "AuditIfNotExists"
      }
    },
    "policyRule": {
      "if": {
        "field": "type",
        "in": [
          "Microsoft.ClassicCompute/domainNames/slots/roles"
        ]
      },
      "then": {
      "effect": "[parameters('effect')]",
        "details": {
          "type": "Microsoft.Security/assessments",
          "name": "8bc390da-9eb6-938d-25ed-44a35d9bcc9d",
          "existenceCondition": {
            "field": "Microsoft.Security/assessments/status.code",
            "in": [
              "NotApplicable",
              "Healthy"
            ]
          }
        }
      }
    }
  },
  "id": "/providers/Microsoft.Authorization/policyDefinitions/5a913c68-0590-402c-a531-e57e19379da3",
  "type": "Microsoft.Authorization/policyDefinitions",
  "name": "5a913c68-0590-402c-a531-e57e19379da3"
}