last sync: 2024-May-23 18:02:58 UTC

Microsoft Managed Control 1194 - Configuration Change Control | Automated Document / Notification / Prohibition Of Changes | Regulatory Compliance - Configuration Management

Azure BuiltIn Policy definition

Source Azure Portal
Display name Microsoft Managed Control 1194 - Configuration Change Control | Automated Document / Notification / Prohibition Of Changes
Id bc34667f-397e-4a65-9b72-d0358f0b6b09
Version 1.0.0
Details on versioning
Category Regulatory Compliance
Microsoft Learn
Description Microsoft implements this Configuration Management control
Additional metadata Name/Id: ACF1194 / Microsoft Managed Control 1194
Category: Configuration Management
Title: Configuration Change Control | Automated Document / Notification / Prohibition Of Changes - Approve
Ownership: Customer, Microsoft
Description: The organization employs automated mechanisms to: Prohibit changes to the information system until designated approvals are received;
Requirements: All the change management tools prevent changes from being deployed without approval from an authorized approver. Interactive access via elevation to production assets requires separate approval or approval of properly configured auto-approval in the Just In Time (JIT) tool.
Mode Indexed
Type Static
Preview False
Deprecated False
Effect Fixed
audit
RBAC role(s) none
Rule aliases none
Rule resource types IF (2)
Microsoft.Resources/subscriptions
Microsoft.Resources/subscriptions/resourceGroups
Compliance Not a Compliance control
Initiatives usage none
History none
JSON compare n/a
JSON
api-version=2021-06-01
EPAC