| Json |
{
"properties": {
"displayName": "Network Watcher should be enabled",
"policyType": "BuiltIn",
"mode": "All",
"description": "Network Watcher is a regional service that enables you to monitor and diagnose conditions at a network scenario level in, to, and from Azure. Scenario level monitoring enables you to diagnose problems at an end to end network level view. Network diagnostic and visualization tools available with Network Watcher help you understand, diagnose, and gain insights to your network in Azure.",
"metadata": {
"version": "1.1.0",
"category": "Network"
},
"parameters": {
"listOfLocations": {
"type": "Array",
"metadata": {
"displayName": "Locations",
"description": "Audit if Network Watcher is not enabled for region(s).",
"strongType": "location"
}
},
"resourceGroupName": {
"type": "String",
"metadata": {
"displayName": "NetworkWatcher resource group name",
"description": "Name of the resource group of NetworkWatcher, such as NetworkWatcherRG. This is the resource group where the Network Watchers are located."
},
"defaultValue": "NetworkWatcherRG"
}
},
"policyRule": {
"if": {
"field": "type",
"equals": "Microsoft.Resources/subscriptions"
},
"then": {
"effect": "auditIfNotExists",
"details": {
"type": "Microsoft.Network/networkWatchers",
"resourceGroupName": "[parameters('resourceGroupName')]",
"existenceCondition": {
"field": "location",
"in": "[parameters('listOfLocations')]"
}
}
}
}
},
"id": "/providers/Microsoft.Authorization/policyDefinitions/b6e2945c-0b7b-40f5-9233-7a5323b5cdc6",
"type": "Microsoft.Authorization/policyDefinitions",
"name": "b6e2945c-0b7b-40f5-9233-7a5323b5cdc6"
}
|