AzPolicyAdvertizer

last sync: 2021-May-10 15:04:35 UTC

Azure Policy definition

Cloud Services (extended support) role instances should be configured securely

Name Cloud Services (extended support) role instances should be configured securely
Azure Portal
Id a0c11ca4-5828-4384-a2f2-fd7444dd5b4d
Version 1.0.0
details on versioning
Category Security Center
Microsoft docs
Description Protect your Cloud Service (extended support) role instances from attacks by ensuring they are not expolosed to any OS vulnerabilities.
Mode Indexed
Type BuiltIn
Preview FALSE
Deprecated FALSE
Effect Default: AuditIfNotExists
Allowed: (AuditIfNotExists, Disabled)
Used RBAC Role none
History
Date/Time (UTC ymd) (i) Change type Change detail
2021-04-27 15:38:15 add a0c11ca4-5828-4384-a2f2-fd7444dd5b4d
Used in Initiatives none
JSON 
{
  "properties": {
    "displayName": "Cloud Services (extended support) role instances should be configured securely",
    "policyType": "BuiltIn",
    "mode": "Indexed",
    "description": "Protect your Cloud Service (extended support) role instances from attacks by ensuring they are not expolosed to any OS vulnerabilities.",
    "metadata": {
      "version": "1.0.0",
      "category": "Security Center"
    },
    "parameters": {
      "effect": {
        "type": "String",
        "metadata": {
          "displayName": "Effect",
          "description": "Enable or disable the execution of the policy"
        },
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "defaultValue": "AuditIfNotExists"
      }
    },
    "policyRule": {
      "if": {
        "field": "type",
        "equals": "Microsoft.Compute/cloudServices"
      },
      "then": {
      "effect": "[parameters('effect')]",
        "details": {
          "type": "Microsoft.Security/assessments",
          "name": "8941d121-f740-35f6-952c-6561d2b38d36",
          "existenceCondition": {
            "field": "Microsoft.Security/assessments/status.code",
            "in": [
              "NotApplicable",
              "Healthy"
            ]
          }
        }
      }
    }
  },
  "id": "/providers/Microsoft.Authorization/policyDefinitions/a0c11ca4-5828-4384-a2f2-fd7444dd5b4d",
  "type": "Microsoft.Authorization/policyDefinitions",
  "name": "a0c11ca4-5828-4384-a2f2-fd7444dd5b4d"
}