AzPolicyAdvertizer

last sync: 2025-Oct-24 17:23:08 UTC

Virtual networks should be protected by Azure DDoS Protection

Azure BuiltIn Policy definition

Source Azure Portal
Display name Virtual networks should be protected by Azure DDoS Protection
Id 94de2ad3-e0c1-4caf-ad78-5d47bbc83d3d
Version 1.0.1
Details on versioning
Versioning Versions supported for Versioning: 2
1.0.1
1.0.0
Built-in Versioning [Preview]
Category Network
Microsoft Learn
Description Protect your virtual networks against volumetric and protocol attacks with Azure DDoS Protection. For more information, visit https://aka.ms/ddosprotectiondocs.
Cloud environments AzureCloud = true
AzureUSGovernment = unknown
AzureChinaCloud = unknown
Available in AzUSGov Unknown, no evidence if Policy definition is/not available in AzureUSGovernment
Mode Indexed
Type BuiltIn
Preview False
Deprecated False
Effect Default
Modify
Allowed
Modify, Audit, Disabled
RBAC role(s)
Role Name Role Id
Network Contributor 4d97b98b-1d4f-4787-a291-c67834d212e7
Rule aliases IF (2)
Alias Namespace ResourceType Path PathIsDefault DefaultPath Modifiable
Microsoft.Network/virtualNetworks/ddosProtectionPlan Microsoft.Network virtualNetworks properties.ddosProtectionPlan True True
Microsoft.Network/virtualNetworks/enableDdosProtection Microsoft.Network virtualNetworks properties.enableDdosProtection True True
THEN-Operations (2)
Alias Namespace ResourceType Path PathIsDefault DefaultPath Modifiable
Microsoft.Network/virtualNetworks/ddosProtectionPlan.id Microsoft.Network virtualNetworks properties.ddosProtectionPlan.id True True
Microsoft.Network/virtualNetworks/enableDdosProtection Microsoft.Network virtualNetworks properties.enableDdosProtection True True
Rule resource types IF (1)
Compliance
The following 2 compliance controls are associated with this Policy definition 'Virtual networks should be protected by Azure DDoS Protection' (94de2ad3-e0c1-4caf-ad78-5d47bbc83d3d)
Control Domain Control Name MetadataId Category Title Owner Requirements Description Info Policy#
Azure_Security_Benchmark_v3.0 NS-5 Azure_Security_Benchmark_v3.0_NS-5 Microsoft cloud security benchmark NS-5 Network Security NS-5 Deploy DDOS protection Shared **Security Principle:** Deploy distributed denial of service (DDoS) protection to protect your network and applications from attacks. **Azure Guidance:** Enable DDoS protection plan on your VNet to protect resources that are exposed to the public networks. **Implementation and additional context:** Manage Azure DDoS Protection using the Azure portal: https://docs.microsoft.com/azure/virtual-network/manage-ddos-protection n/a link 2
mp.s.4 Protection against denial of service mp.s.4 Protection against denial of service 404 not found n/a n/a 7
Initiatives usage
Initiative DisplayName Initiative Id Initiative Category State Type polSet in AzUSGov
[Deprecated] Enforce recommended guardrails for Network and Networking services Enforce-Guardrails-Network Network Deprecated ALZ
[Preview]: Microsoft cloud security benchmark v2 e3ec7e09-768c-4b64-882c-fcada3772047 Security Center Preview BuiltIn unknown
Enforce recommended guardrails for Network and Networking services Enforce-Guardrails-Network_20250326 Network GA ALZ
Spain ENS 175daf90-21e1-4fec-b745-7b4c909aa94c Regulatory Compliance GA BuiltIn unknown
History
Date/Time (UTC ymd) (i) Change type Change detail
2024-01-12 18:35:06 change Patch (1.0.0 > 1.0.1)
2021-03-31 14:35:06 add 94de2ad3-e0c1-4caf-ad78-5d47bbc83d3d
JSON compare
compare mode: version left: version right:
JSON
api-version=2021-06-01
EPAC