AzPolicyAdvertizer

last sync: 2023-Jun-19 17:45:01 UTC

Community Policy definition

Audit Automatic Failover for CosmosDB accounts

Name Audit Automatic Failover for CosmosDB accounts
Community-Policy GitHub
Id cosmosdb_audit-cosmosdb-autofailover-georeplication
Version n/a
details on versioning
Category undefined
Microsoft docs
Description This policy audits Automatic Failover for CosmosDB accounts
Mode all
Type Custom Community
Effect Fixed
audit
Used RBAC Role none
Rule Aliases IF (2)
Alias Namespace ResourceType DefaultPath Modifiable
Microsoft.DocumentDB/databaseAccounts/enableAutomaticFailover Microsoft.DocumentDB databaseAccounts properties.enableAutomaticFailover true
Microsoft.DocumentDB/databaseAccounts/enableMultipleWriteLocations Microsoft.DocumentDB databaseAccounts properties.enableMultipleWriteLocations true
Rule ResourceTypes IF (1)
Microsoft.DocumentDB/databaseAccounts
JSON 
{6 items
  • mode: "all",
  • displayName: "Audit Automatic Failover for CosmosDB accounts",
  • description: "This policy audits Automatic Failover for CosmosDB accounts",
  • policyRule: {2 items
    • if: {1 item
      • allOf: [3 items
        • {2 items
          • field: "type",
          • equals: "Microsoft.DocumentDB/databaseAccounts"
          },
        • {2 items
          • field: "Microsoft.DocumentDB/databaseAccounts/enableAutomaticFailover",
          • equals: "false"
          },
        • {2 items
          • field: "Microsoft.DocumentDB/databaseAccounts/enableMultipleWriteLocations",
          • equals: "false"
          }
        ]
      },
    • then: {1 item
      • effect: "audit"
      }
    },
  • parameters: {},
  • metadata: {}
}