AzPolicyAdvertizer

last sync: 2025-Jun-30 17:25:56 UTC

Container Apps should disable external network access

Azure BuiltIn Policy definition

Source Azure Portal
Display name Container Apps should disable external network access
Id 783ea2a8-b8fd-46be-896a-9ae79643a0b1
Version 1.1.0
Details on versioning
Versioning Versions supported for Versioning: 2
1.1.0
1.0.1
Built-in Versioning [Preview]
Category Container Apps
Microsoft Learn
Description Disable external network access to your Container Apps by enforcing internal-only ingress. This will ensure inbound communication for Container Apps is limited to callers within the Container Apps environment.
Cloud environments AzureCloud = true
AzureUSGovernment = unknown
AzureChinaCloud = unknown
Available in AzUSGov Unknown, no evidence if Policy definition is/not available in AzureUSGovernment
Mode Indexed
Type BuiltIn
Preview False
Deprecated False
Effect Default
Audit
Allowed
Audit, Deny, Disabled
RBAC role(s) none
Rule aliases IF (1)
Alias Namespace ResourceType Path PathIsDefault DefaultPath Modifiable
Microsoft.App/containerApps/configuration.ingress.external Microsoft.App containerApps properties.configuration.ingress.external True False
Rule resource types IF (1)
Compliance Not a Compliance control
Initiatives usage
Initiative DisplayName Initiative Id Initiative Category State Type polSet in AzUSGov
Public network access should be disabled for PaaS services Deny-PublicPaaSEndpoints Network GA ALZ
History
Date/Time (UTC ymd) (i) Change type Change detail
2025-03-03 18:38:02 change Minor (1.0.1 > 1.1.0)
2022-07-29 16:32:46 change Patch (1.0.0 > 1.0.1)
2022-05-16 16:31:13 add 783ea2a8-b8fd-46be-896a-9ae79643a0b1
JSON compare
compare mode: version left: version right:
JSON
api-version=2021-06-01
EPAC