AzPolicyAdvertizer

last sync: 2023-Jun-19 17:45:01 UTC

Community Policy definition

Resource Lock should be enabled

Name

Resource Lock should be enabled
Community-Policy GitHub

d1ad6c00-a48d-4039-87a9-8662253c303f

Version

n/a
details on versioning

Category

Backup
Microsoft docs

Description

With this policy: any resource that has the tag key LockLevel with the value CanNotDelete means authorized users can read and modify the resource, but they can t delete it.

Mode

Indexed

Type

Custom Community

Effect

Default
DeployIfNotExists
Allowed
DeployIfNotExists, Disabled, AuditIfNotExists

Used RBAC Role

Role Name	Role Id
Owner	8e3af657-a8ff-443c-a75c-2fe8c4bcb635

Rule Aliases

THEN-ExistenceCondition (2)

Alias	Namespace	ResourceType	DefaultPath	Modifiable
Microsoft.Authorization/locks/level	Microsoft.Authorization	locks	properties.level	false
Microsoft.Authorization/locks/notes	Microsoft.Authorization	locks	properties.notes	false

Rule ResourceTypes

THEN-Deployment (1)
Microsoft.Authorization/locks

JSON