last sync: 2023-Sep-29 17:58:48 UTC

Azure Policy definition

[Preview]: Configure Azure Arc enabled Kubernetes clusters to install Microsoft Defender for Cloud extension

Source Azure Portal
Display name [Preview]: Configure Azure Arc enabled Kubernetes clusters to install Microsoft Defender for Cloud extension
Id 708b60a6-d253-4fe0-9114-4be4c00f012c
Version 7.1.0-preview
details on versioning
Category Kubernetes
Microsoft docs
Description Microsoft Defender for Cloud extension for Azure Arc provides threat protection for your Arc enabled Kubernetes clusters. The extension collects data from all nodes in the cluster and sends it to the Azure Defender for Kubernetes backend in the cloud for further analysis. Learn more in https://docs.microsoft.com/azure/defender-for-cloud/defender-for-containers-enable?pivots=defender-for-container-arc.
Mode Indexed
Type BuiltIn
Preview true
Deprecated False
Effect Default
DeployIfNotExists
Allowed
DeployIfNotExists, Disabled
RBAC role(s)
Role Name Role Id
Contributor b24988ac-6180-42a0-ab88-20f7382dd24c
Log Analytics Contributor 92aaf0da-9dab-42b6-94a3-d43ce8d16293
Rule aliases IF (1)
Alias Namespace ResourceType DefaultPath Modifiable
Microsoft.Kubernetes/connectedClusters/distribution Microsoft.Kubernetes connectedClusters properties.distribution false
THEN-ExistenceCondition (2)
Alias Namespace ResourceType DefaultPath Modifiable
Microsoft.KubernetesConfiguration/extensions/extensionType Microsoft.KubernetesConfiguration extensions properties.extensionType false
Microsoft.KubernetesConfiguration/extensions/provisioningState Microsoft.KubernetesConfiguration extensions properties.provisioningState false
Rule resource types IF (1)
Microsoft.Kubernetes/connectedClusters
THEN-Deployment (4)
Microsoft.KubernetesConfiguration/extensions
Microsoft.OperationalInsights/workspaces
Microsoft.Resources/deployments
Microsoft.Resources/resourceGroups
Compliance Not a Compliance control
Initiatives usage none
History
Date/Time (UTC ymd) (i) Change type Change detail
2022-07-29 16:32:46 change Minor, suffix remains equal (7.0.0-preview > 7.1.0-preview)
2022-07-08 16:32:07 change Major, suffix remains equal (6.1.2-preview > 7.0.0-preview)
2022-07-01 16:32:34 change Patch, new suffix: preview (6.1.1 > 6.1.2-preview)
2022-06-24 19:15:47 change Patch, old suffix: preview (6.1.0-preview > 6.1.1)
2022-06-07 16:30:19 change Minor, suffix remains equal (6.0.0-preview > 6.1.0-preview)
2022-04-29 18:06:01 change Major, suffix remains equal (5.1.0-preview > 6.0.0-preview)
2022-04-22 19:50:54 change Major, suffix remains equal (4.1.0-preview > 5.1.0-preview)
2022-04-01 20:29:14 change Minor, suffix remains equal (4.0.0-preview > 4.1.0-preview)
2022-02-04 18:25:37 change Major, suffix remains equal (3.0.0-preview > 4.0.0-preview)
2021-11-12 16:23:07 change Major, suffix remains equal (2.0.0-preview > 3.0.0-preview)
2021-08-30 14:27:30 change Major, suffix remains equal (1.0.0-preview > 2.0.0-preview)
2021-05-26 13:43:16 add 708b60a6-d253-4fe0-9114-4be4c00f012c
JSON compare
compare mode: version left: version right:
JSON
api-version=2021-06-01