Source |
Repository Azure Landing Zones (ALZ) GitHub JSON Deny-StorageAccount-CustomDomain |
|||||||||||||||
Display name | Storage Accounts with custom domains assigned should be denied | |||||||||||||||
Id | Deny-StorageAccount-CustomDomain | |||||||||||||||
Version | 1.0.0 Details on versioning |
|||||||||||||||
Category | Storage | |||||||||||||||
Description | This policy denies the creation of Storage Accounts with custom domains assigned as communication cannot be encrypted, and always uses HTTP. | |||||||||||||||
Mode | All | |||||||||||||||
Type | Custom Azure Landing Zones (ALZ) | |||||||||||||||
Preview | False | |||||||||||||||
Deprecated | False | |||||||||||||||
Effect | Default Deny Allowed Audit, Deny, Disabled |
|||||||||||||||
RBAC role(s) | none | |||||||||||||||
Rule aliases | IF (2)
|
|||||||||||||||
Rule resource types | IF (1) Microsoft.Storage/storageAccounts |
|||||||||||||||
Initiatives usage | none | |||||||||||||||
History |
|
|||||||||||||||
JSON compare | n/a | |||||||||||||||
JSON |
|