AzPolicyAdvertizer

last sync: 2025-Aug-12 17:23:12 UTC

[Deprecated]: Configure Azure Defender for container registries to be enabled

Azure BuiltIn Policy definition

-Source
+ Azure Portal
-Display name
+[Deprecated]: Configure Azure Defender for container registries to be enabled
-Id
+                        d3d1e68e-49d4-4b56-acff-93cef644b432
-Version
+.0.0-deprecated
  Details on versioning
-Versioning
+                        Versions supported for Versioning: 1
1.0.0 (1.0.0-deprecated)
                         Built-in Versioning [Preview]
-Category
+Security Center
 Microsoft Learn
-Description
+Azure Defender for container registries provides vulnerability scanning of any images pulled within the last 30 days, pushed to your registry, or imported, and exposes detailed findings per image.
-Cloud environments
+AzureCloud = true
AzureUSGovernment = true
AzureChinaCloud = unknown
-Available in AzUSGov
+The Policy is available in AzureUSGovernment cloud. Version: '1.0.0-deprecated'
 Repository: Azure-Policy d3d1e68e-49d4-4b56-acff-93cef644b432
-Mode
+All
-Type
+BuiltIn
-Preview
+                False
-Deprecated
+True
-Effect
+                Default
DeployIfNotExists

                Allowed
DeployIfNotExists, Disabled
-RBAC role(s)
+                                Role Name
                                Role Id
                            
                                                        
                                    Security Admin
                                    fb1c8493-542b-48eb-b624-b4c8fea62acd
-Role Name
+Role Id
-Security Admin
+fb1c8493-542b-48eb-b624-b4c8fea62acd
-Rule aliases
+                    THEN-ExistenceCondition (1)

                    
                                        
                        Alias
                        Namespace
                        ResourceType
                        Path
                        PathIsDefault
                        DefaultPath
                        Modifiable
                    
                                                
                                Microsoft.Security/pricings/pricingTier
                                Microsoft.Security
                                pricings
                                properties.pricingTier
                                True
                                
                                False
-Alias
+Modifiable
-Microsoft.Security/pricings/pricingTier
+False
-Rule resource types
+                IF (1)

                                    Microsoft.Resources/subscriptions
                THEN-Deployment (1)

                                    Microsoft.Security/pricings
-Compliance
+                    Not a Compliance control
-Initiatives usage
+                none
-History
+                                Date/Time (UTC ymd) (i)
                                Change type
                                Change detail
                            
                                                    
                                2021-12-06 22:17:57
                                change
                                Version remains equal, new suffix: deprecated (1.0.0 > 1.0.0-deprecated)
                            
                            
                                2021-07-30 15:17:20
                                add
                                d3d1e68e-49d4-4b56-acff-93cef644b432
-Date/Time (UTC ymd) (i)
+Change detail
--12-06 22:17:57
+Version remains equal, new suffix: deprecated (1.0.0 > 1.0.0-deprecated)
--07-30 15:17:20
+d3d1e68e-49d4-4b56-acff-93cef644b432
-JSON compare
+{
@@ -1,12 +1,13 @@
 {
-    "displayName": "Configure Azure Defender for container registries to be enabled",
     "policyType": "BuiltIn",
     "mode": "All",
     "description": "Azure Defender for container registries provides vulnerability scanning of any images pulled within the last 30 days, pushed to your registry, or imported, and exposes detailed findings per image.",
     "metadata": {
-        "version": "1.0.0",
-        "category": "Security Center"
     },
     "parameters": {
         "effect": {
             "type": "String",
@@ -22,14 +23,10 @@
         }
     },
     "policyRule": {
         "if": {
-            "allOf": [
-                {
-                    "field": "type",
-                    "equals": "Microsoft.Resources/subscriptions"
-                }
-            ]
         },
         "then": {
             "effect": "[parameters('effect')]",
             "details": {
 {
+    "displayName": "[Deprecated]: Configure Azure Defender for container registries to be enabled",
     "policyType": "BuiltIn",
     "mode": "All",
     "description": "Azure Defender for container registries provides vulnerability scanning of any images pulled within the last 30 days, pushed to your registry, or imported, and exposes detailed findings per image.",
     "metadata": {
+        "version": "1.0.0-deprecated",
+        "category": "Security Center",
+        "deprecated": true
     },
     "parameters": {
         "effect": {
             "type": "String",
         }
     },
     "policyRule": {
         "if": {
+            "field": "type",
+            "equals": "Microsoft.Resources/subscriptions"
         },
         "then": {
             "effect": "[parameters('effect')]",
             "details": {
-JSON
+                                api-version=2021-06-01

                                  EPAC
                                
                            
                        
                        
                            
                                {7 itemsdisplayName: "[Deprecated]: Configure Azure Defender for container registries to be enabled",
policyType: "BuiltIn",
mode: "All",
description: "Azure Defender for container registries provides vulnerability scanning of any images pulled within the last 30 days, pushed to your registry, or imported, and exposes detailed findings per image.",
metadata: {3 itemsversion: "1.0.0-deprecated",
category: "Security Center",
deprecated: true
},
parameters: {1 itemeffect: {4 itemstype: "String",
metadata: {2 itemsdisplayName: "Effect",
description: "Enable or disable the execution of the policy"
},
allowedValues: [2 items"DeployIfNotExists",
"Disabled"
],
defaultValue: "DeployIfNotExists"
}
},
policyRule: {2 itemsif: {2 itemsfield: "type",
equals: "Microsoft.Resources/subscriptions"
},
then: {2 itemseffect: "[parameters('effect')]",
details: {7 itemstype: "Microsoft.Security/pricings",
name: "ContainerRegistry",
deploymentScope: "subscription",
existenceScope: "subscription",
roleDefinitionIds: [1 item"/providers/Microsoft.Authorization/roleDefinitions/fb1c8493-542b-48eb-b624-b4c8fea62acd" Security Admin 
],
existenceCondition: {2 itemsfield: "Microsoft.Security/pricings/pricingTier",
equals: "Standard"
},
deployment: {2 itemslocation: "westeurope",
properties: {3 itemsmode: "incremental",
parameters: {},
template: {6 items$schema: "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#",
contentVersion: "1.0.0.0",
parameters: {},
variables: {},
resources: [1 item{4 itemstype: "Microsoft.Security/pricings",
apiVersion: "2018-06-01",
name: "ContainerRegistry",
properties: {1 itempricingTier: "Standard"
}
}
],
outputs: {}
}
}
}
}
}
}
}
                                 api-version=2021-06-01

                                  EPAC
                                 {7 itemsdisplayName: "[Deprecated]: Configure Azure Defender for container registries to be enabled",
policyType: "BuiltIn",
mode: "All",
description: "Azure Defender for container registries provides vulnerability scanning of any images pulled within the last 30 days, pushed to your registry, or imported, and exposes detailed findings per image.",
metadata: {3 itemsversion: "1.0.0-deprecated",
category: "Security Center",
deprecated: true
},
parameters: {1 itemeffect: {4 itemstype: "String",
metadata: {2 itemsdisplayName: "Effect",
description: "Enable or disable the execution of the policy"
},
allowedValues: [2 items"DeployIfNotExists",
"Disabled"
],
defaultValue: "DeployIfNotExists"
}
},
policyRule: {2 itemsif: {2 itemsfield: "type",
equals: "Microsoft.Resources/subscriptions"
},
then: {2 itemseffect: "[parameters('effect')]",
details: {7 itemstype: "Microsoft.Security/pricings",
name: "ContainerRegistry",
deploymentScope: "subscription",
existenceScope: "subscription",
roleDefinitionIds: [1 item"/providers/Microsoft.Authorization/roleDefinitions/fb1c8493-542b-48eb-b624-b4c8fea62acd" Security Admin 
],
existenceCondition: {2 itemsfield: "Microsoft.Security/pricings/pricingTier",
equals: "Standard"
},
deployment: {2 itemslocation: "westeurope",
properties: {3 itemsmode: "incremental",
parameters: {},
template: {6 items$schema: "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#",
contentVersion: "1.0.0.0",
parameters: {},
variables: {},
resources: [1 item{4 itemstype: "Microsoft.Security/pricings",
apiVersion: "2018-06-01",
name: "ContainerRegistry",
properties: {1 itempricingTier: "Standard"
}
}
],
outputs: {}
}
}
}
}
}
}
}