last sync: 2021-Aug-04 14:59:26 UTC

Azure Policy definition

Azure Web PubSub Service should disable public network access

Name Azure Web PubSub Service should disable public network access
Azure Portal
Id bf45113f-264e-4a87-88f9-29ac8a0aca6a
Version 1.0.0
details on versioning
Category Web PubSub
Microsoft docs
Description Disabling public network access improves security by ensuring that Azure Web PubSub service isn't exposed on the public internet. Creating private endpoints can limit exposure of Azure Web PubSub service. Learn more at: https://aka.ms/awps/networkacls.
Mode Indexed
Type BuiltIn
Preview FALSE
Deprecated FALSE
Effect Default: Audit
Allowed: (Audit, Deny, Disabled)
Used RBAC Role none
History
Date/Time (UTC ymd) (i) Change type Change detail
2021-05-26 13:43:16 add bf45113f-264e-4a87-88f9-29ac8a0aca6a
Used in Initiatives none
JSON
{
  "properties": {
    "displayName": "Azure Web PubSub Service should disable public network access",
    "policyType": "BuiltIn",
    "mode": "Indexed",
    "description": "Disabling public network access improves security by ensuring that Azure Web PubSub service isn't exposed on the public internet. Creating private endpoints can limit exposure of Azure Web PubSub service. Learn more at: https://aka.ms/awps/networkacls.",
    "metadata": {
      "version": "1.0.0",
      "category": "Web PubSub"
    },
    "parameters": {
      "effect": {
        "type": "String",
        "metadata": {
          "displayName": "Effect",
          "description": "Enable or disable the execution of the policy"
        },
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "defaultValue": "Audit"
      }
    },
    "policyRule": {
      "if": {
        "allOf": [
          {
            "field": "type",
            "equals": "Microsoft.SignalRService/webPubSub"
          },
          {
            "field": "Microsoft.SignalRService/webPubSub/publicNetworkAccess",
            "notEquals": "Disabled"
          }
        ]
      },
      "then": {
      "effect": "[parameters('effect')]"
      }
    }
  },
  "id": "/providers/Microsoft.Authorization/policyDefinitions/bf45113f-264e-4a87-88f9-29ac8a0aca6a",
  "type": "Microsoft.Authorization/policyDefinitions",
  "name": "bf45113f-264e-4a87-88f9-29ac8a0aca6a"
}