AzPolicyAdvertizer

last sync: 2021-Oct-25 16:02:14 UTC

Azure Policy definition

Configure App Configuration to disable public network access

Name Configure App Configuration to disable public network access
Azure Portal
Id 73290fa2-dfa7-4bbb-945d-a5e23b75df2c
Version 1.0.0
details on versioning
Category App Configuration
Microsoft docs
Description Disable public network access for App Configuration so that it isn't accessible over the public internet. This configuration helps protect them against data leakage risks. You can limit exposure of the your resources by creating private endpoints instead. Learn more at: https://aka.ms/appconfig/private-endpoint.
Mode Indexed
Type BuiltIn
Preview FALSE
Deprecated FALSE
Effect Default: Modify
Allowed: (Modify, Disabled)
Used RBAC Role
Role Name Role Id
Contributor b24988ac-6180-42a0-ab88-20f7382dd24c
History
Date/Time (UTC ymd) (i) Change type Change detail
2021-03-02 15:11:40 add 73290fa2-dfa7-4bbb-945d-a5e23b75df2c
Used in Initiatives none
JSON 
{
  "displayName": "Configure App Configuration to disable public network access",
  "policyType": "BuiltIn",
  "mode": "Indexed",
  "description": "Disable public network access for App Configuration so that it isn't accessible over the public internet. This configuration helps protect them against data leakage risks. You can limit exposure of the your resources by creating private endpoints instead. Learn more at: https://aka.ms/appconfig/private-endpoint.",
  "metadata": {
    "version": "1.0.0",
    "category": "App Configuration"
  },
  "parameters": {
    "effect": {
      "type": "String",
      "metadata": {
        "displayName": "Effect",
        "description": "Enable or disable the execution of the policy"
      },
      "allowedValues": [
        "Modify",
        "Disabled"
      ],
      "defaultValue": "Modify"
    }
  },
  "policyRule": {
    "if": {
      "allOf": [
        {
          "field": "type",
          "equals": "Microsoft.AppConfiguration/configurationStores"
        },
        {
          "field": "Microsoft.AppConfiguration/configurationStores/publicNetworkAccess",
          "notEquals": "Disabled"
        }
      ]
    },
    "then": {
      "effect": "[parameters('effect')]",
      "details": {
        "roleDefinitionIds": [
          "/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"
        ],
        "conflictEffect": "audit",
        "operations": [
          {
            "condition": "[greater(requestContext().apiVersion, '2019-10-01')]",
            "operation": "addOrReplace",
            "field": "Microsoft.AppConfiguration/configurationStores/publicNetworkAccess",
            "value": "Disabled"
          }
        ]
      }
    }
  }
}