AzPolicyAdvertizer

last sync: 2024-Apr-25 17:46:59 UTC

Azure NetApp Files Volumes of type NFSv4.1 should use Kerberos data encryption

Azure BuiltIn Policy definition

Source Azure Portal
Display name Azure NetApp Files Volumes of type NFSv4.1 should use Kerberos data encryption
Id 7c6c7139-7d8e-45d0-9d94-72386a61308b
Version 1.0.0
Details on versioning
Category Storage
Microsoft Learn
Description Only allow the use of Kerberos privacy (5p) security mode to ensure data is encrypted.
Mode All
Type BuiltIn
Preview False
Deprecated False
Effect Default
Audit
Allowed
Audit, Deny, Disabled
RBAC role(s) none
Rule aliases IF (9)
Alias Namespace ResourceType DefaultPath Modifiable
Microsoft.NetApp/netAppAccounts/capacityPools/volumes/exportPolicy.rules[*] Microsoft.NetApp netAppAccounts/capacityPools/volumes properties.exportPolicy.rules[*] false
Microsoft.NetApp/netAppAccounts/capacityPools/volumes/exportPolicy.rules[*].kerberos5iReadOnly Microsoft.NetApp netAppAccounts/capacityPools/volumes properties.exportPolicy.rules[*].kerberos5iReadOnly false
Microsoft.NetApp/netAppAccounts/capacityPools/volumes/exportPolicy.rules[*].kerberos5iReadWrite Microsoft.NetApp netAppAccounts/capacityPools/volumes properties.exportPolicy.rules[*].kerberos5iReadWrite false
Microsoft.NetApp/netAppAccounts/capacityPools/volumes/exportPolicy.rules[*].kerberos5pReadOnly Microsoft.NetApp netAppAccounts/capacityPools/volumes properties.exportPolicy.rules[*].kerberos5pReadOnly false
Microsoft.NetApp/netAppAccounts/capacityPools/volumes/exportPolicy.rules[*].kerberos5pReadWrite Microsoft.NetApp netAppAccounts/capacityPools/volumes properties.exportPolicy.rules[*].kerberos5pReadWrite false
Microsoft.NetApp/netAppAccounts/capacityPools/volumes/exportPolicy.rules[*].kerberos5ReadOnly Microsoft.NetApp netAppAccounts/capacityPools/volumes properties.exportPolicy.rules[*].kerberos5ReadOnly false
Microsoft.NetApp/netAppAccounts/capacityPools/volumes/exportPolicy.rules[*].kerberos5ReadWrite Microsoft.NetApp netAppAccounts/capacityPools/volumes properties.exportPolicy.rules[*].kerberos5ReadWrite false
Microsoft.NetApp/netAppAccounts/capacityPools/volumes/kerberosEnabled Microsoft.NetApp netAppAccounts/capacityPools/volumes properties.kerberosEnabled false
Microsoft.NetApp/netAppAccounts/capacityPools/volumes/protocolTypes[*] Microsoft.NetApp netAppAccounts/capacityPools/volumes properties.protocolTypes[*] false
Rule resource types IF (1)
Microsoft.NetApp/netAppAccounts/capacityPools/volumes
Compliance Not a Compliance control
Initiatives usage none
History
Date/Time (UTC ymd) (i) Change type Change detail
2022-02-11 18:30:22 add 7c6c7139-7d8e-45d0-9d94-72386a61308b
JSON compare n/a
JSON
api-version=2021-06-01
EPAC