last sync: 2025-May-30 17:23:33 UTC

Function apps should enable configuration routing to Azure Virtual Network

Azure BuiltIn Policy definition

Source Azure Portal
Display name Function apps should enable configuration routing to Azure Virtual Network
Id 5e57f5ad-995a-485b-9f42-4748935ee5d9
Version 1.0.0
Details on versioning
Versioning Versions supported for Versioning: 1
1.0.0
Built-in Versioning [Preview]
Category App Service
Microsoft Learn
Description By default, app configuration such as pulling container images and mounting content storage will not be routed through the regional virtual network integration. Using the API to set routing options to true enables configuration traffic through the Azure Virtual Network. For more information, visit https://aka.ms/appservice-vnet-configuration-routing. Note that this policy should only be applied to function apps that are not running on the Flex Consumption or Consumption hosting plans.
Cloud environments AzureCloud = true
AzureUSGovernment = unknown
AzureChinaCloud = unknown
Available in AzUSGov Unknown, no evidence if Policy definition is/not available in AzureUSGovernment
Mode Indexed
Type BuiltIn
Preview False
Deprecated False
Effect Default
Audit
Allowed
Audit, Deny, Disabled
RBAC role(s) none
Rule aliases IF (2)
Alias Namespace ResourceType Path PathIsDefault DefaultPath Modifiable
Microsoft.Web/sites/vnetContentShareEnabled Microsoft.Web sites properties.vnetContentShareEnabled True False
Microsoft.Web/sites/vnetImagePullEnabled Microsoft.Web sites properties.vnetImagePullEnabled True True
Rule resource types IF (1)
Compliance Not a Compliance control
Initiatives usage none
History
Date/Time (UTC ymd) (i) Change type Change detail
2025-05-06 19:40:34 add 5e57f5ad-995a-485b-9f42-4748935ee5d9
JSON compare n/a
JSON
api-version=2021-06-01
EPAC