AzPolicyAdvertizer

last sync: 2021-Sep-22 19:36:51 UTC

Azure Policy definition

Authorization rules on the Event Hub instance should be defined

Name Authorization rules on the Event Hub instance should be defined
Azure Portal
Id f4826e5f-6a27-407c-ae3e-9582eb39891d
Version 1.0.0
details on versioning
Category Event Hub
Microsoft docs
Description Audit existence of authorization rules on Event Hub entities to grant least-privileged access
Mode All
Type BuiltIn
Preview FALSE
Deprecated FALSE
Effect Default: AuditIfNotExists
Allowed: (AuditIfNotExists, Disabled)
Used RBAC Role none
History none
Used in Initiatives none
JSON 
{
  "displayName": "Authorization rules on the Event Hub instance should be defined",
  "policyType": "BuiltIn",
  "mode": "All",
  "description": "Audit existence of authorization rules on Event Hub entities to grant least-privileged access",
  "metadata": {
    "version": "1.0.0",
    "category": "Event Hub"
  },
  "parameters": {
    "effect": {
      "type": "String",
      "metadata": {
        "displayName": "Effect",
        "description": "Enable or disable the execution of the policy"
      },
      "allowedValues": [
        "AuditIfNotExists",
        "Disabled"
      ],
      "defaultValue": "AuditIfNotExists"
    }
  },
  "policyRule": {
    "if": {
      "field": "type",
      "equals": "Microsoft.EventHub/namespaces/eventhubs"
    },
    "then": {
      "effect": "[parameters('effect')]",
      "details": {
        "type": "Microsoft.EventHub/namespaces/eventHubs/authorizationRules"
      }
    }
  }
}