| JSON |
{
"properties": {
"displayName": "Ensure that 'Python version' is the latest, if used as a part of the Web app",
"policyType": "BuiltIn",
"mode": "Indexed",
"description": "Periodically, newer versions are released for Python software either due to security flaws or to include additional functionality. Using the latest Python version for web apps is recommended in order to take advantage of security fixes, if any, and/or new functionalities of the latest version. Currently, this policy only applies to Linux web apps.",
"metadata": {
"version": "3.0.0",
"category": "App Service"
},
"parameters": {
"effect": {
"type": "String",
"metadata": {
"displayName": "Effect",
"description": "Enable or disable the execution of the policy"
},
"allowedValues": [
"AuditIfNotExists",
"Disabled"
],
"defaultValue": "AuditIfNotExists"
},
"WindowsPythonLatestVersion": {
"type": "String",
"metadata": {
"displayName": "[Deprecated]: Latest Windows Python version",
"description": "Latest supported Python version for App Services",
"deprecated": true
},
"defaultValue": "3.6"
},
"LinuxPythonLatestVersion": {
"type": "String",
"metadata": {
"displayName": "Linux Latest Python version",
"description": "Latest supported Python version for App Services"
},
"defaultValue": "3.9"
}
},
"policyRule": {
"if": {
"allOf": [
{
"field": "type",
"equals": "Microsoft.Web/sites"
},
{
"field": "kind",
"like": "app*"
},
{
"field": "kind",
"contains": "linux"
}
]
},
"then": {
"effect": "[parameters('effect')]",
"details": {
"type": "Microsoft.Web/sites/config",
"name": "web",
"existenceCondition": {
"anyOf": [
{
"field": "Microsoft.Web/sites/config/web.linuxFxVersion",
"notContains": "PYTHON"
},
{
"field": "Microsoft.Web/sites/config/web.linuxFxVersion",
"equals": "[concat('PYTHON|', parameters('LinuxPythonLatestVersion'))]"
}
]
}
}
}
}
},
"id": "/providers/Microsoft.Authorization/policyDefinitions/7008174a-fd10-4ef0-817e-fc820a951d73",
"type": "Microsoft.Authorization/policyDefinitions",
"name": "7008174a-fd10-4ef0-817e-fc820a951d73"
}
|