last sync: 2025-Jun-13 17:23:19 UTC

Function app slots should enable outbound non-RFC 1918 traffic to Azure Virtual Network

Azure BuiltIn Policy definition

Source Azure Portal
Display name Function app slots should enable outbound non-RFC 1918 traffic to Azure Virtual Network
Id 75c42c42-dfb3-453d-8fd5-9f978e1b1106
Version 1.0.0
Details on versioning
Versioning Versions supported for Versioning: 1
1.0.0
Built-in Versioning [Preview]
Category App Service
Microsoft Learn
Description By default, if one uses regional Azure Virtual Network (VNET) integration, the app only routes RFC1918 traffic into that respective virtual network. Using the API to set 'vnetRouteAllEnabled' to true enables all outbound traffic into the Azure Virtual Network. Note that this policy should only be applied to function apps that are not running on the Flex Consumption or Consumption hosting plans.
Cloud environments AzureCloud = true
AzureUSGovernment = unknown
AzureChinaCloud = unknown
Available in AzUSGov Unknown, no evidence if Policy definition is/not available in AzureUSGovernment
Mode Indexed
Type BuiltIn
Preview False
Deprecated False
Effect Default
Audit
Allowed
Audit, Deny, Disabled
RBAC role(s) none
Rule aliases IF (1)
Alias Namespace ResourceType Path PathIsDefault DefaultPath Modifiable
Microsoft.Web/sites/slots/vnetRouteAllEnabled Microsoft.Web sites/slots properties.vnetRouteAllEnabled True False
Rule resource types IF (1)
Compliance Not a Compliance control
Initiatives usage none
History
Date/Time (UTC ymd) (i) Change type Change detail
2025-05-06 19:40:34 add 75c42c42-dfb3-453d-8fd5-9f978e1b1106
JSON compare n/a
JSON
api-version=2021-06-01
EPAC