AzPolicyAdvertizer

last sync: 2021-Nov-26 17:15:01 UTC

Azure Policy definition

Configure App Configuration stores to disable local authentication methods

Name Configure App Configuration stores to disable local authentication methods
Azure Portal
Id 72bc14af-4ab8-43af-b4e4-38e7983f9a1f
Version 1.0.0
details on versioning
Category App Configuration
Microsoft docs
Description Disable local authentication methods so that your App Configuration stores require Azure Active Directory identities exclusively for authentication. Learn more at: https://go.microsoft.com/fwlink/?linkid=2161954.
Mode Indexed
Type BuiltIn
Preview FALSE
Deprecated FALSE
Effect Default: Modify
Allowed: (Modify, Disabled)
Used RBAC Role
Role Name Role Id
Contributor b24988ac-6180-42a0-ab88-20f7382dd24c
History
Date/Time (UTC ymd) (i) Change type Change detail
2021-06-02 22:44:52 add 72bc14af-4ab8-43af-b4e4-38e7983f9a1f
Used in Initiatives none
JSON 
{
  "displayName": "Configure App Configuration stores to disable local authentication methods",
  "policyType": "BuiltIn",
  "mode": "Indexed",
  "description": "Disable local authentication methods so that your App Configuration stores require Azure Active Directory identities exclusively for authentication. Learn more at: https://go.microsoft.com/fwlink/?linkid=2161954.",
  "metadata": {
    "version": "1.0.0",
    "category": "App Configuration"
  },
  "parameters": {
    "effect": {
      "type": "String",
      "metadata": {
        "displayName": "Effect",
        "description": "Enable or disable the execution of the policy"
      },
      "allowedValues": [
        "Modify",
        "Disabled"
      ],
      "defaultValue": "Modify"
    }
  },
  "policyRule": {
    "if": {
      "allOf": [
        {
          "field": "type",
          "equals": "Microsoft.AppConfiguration/configurationStores"
        },
        {
          "field": "Microsoft.AppConfiguration/configurationStores/disableLocalAuth",
          "notEquals": true
        }
      ]
    },
    "then": {
      "effect": "[parameters('effect')]",
      "details": {
        "conflictEffect": "audit",
        "roleDefinitionIds": [
          "/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"
        ],
        "operations": [
          {
            "condition": "[greaterOrEquals(requestContext().apiVersion, '2021-03-01-preview')]",
            "operation": "addOrReplace",
            "field": "Microsoft.AppConfiguration/configurationStores/disableLocalAuth",
            "value": true
          }
        ]
      }
    }
  }
}