AzInitiativeAdvertizer

last sync: 2021-Jan-20 16:06:15 UTC

Azure Policy Initiative

[Preview]: Deploy prerequisites to enable Guest Configuration policies on virtual machines

Name[Preview]: Deploy prerequisites to enable Guest Configuration policies on virtual machines
Azure Portal
Id12794019-7a00-42cf-95c2-882eed337cc8
Version1.0.0-preview
details on versioning
CategoryGuest Configuration
Microsoft docs
DescriptionThis initiative adds a system-assigned managed identity and deploys the platform-appropriate Guest Configuration extension to virtual machines that are eligible to be monitored by Guest Configuration policies. This is a prerequisite for all Guest Configuration policies and must be assigned to the policy assignment scope before using any Guest Configuration policy. For more information on Guest Configuration, visit https://aka.ms/gcpol.
TypeBuiltIn
DeprecatedFalse
PreviewTrue
History
Date/Time (UTC ymd) (i) Changes
2020-07-17 15:57:10 add Initiative 12794019-7a00-42cf-95c2-882eed337cc8
2020-06-29 05:46:42 remove Initiative 12794019-7a00-42cf-95c2-882eed337cc8
2020-06-23 16:03:23 add Initiative 12794019-7a00-42cf-95c2-882eed337cc8
Policy count Total Policies: 4
Builtin Policies: 4
Static Policies: 0
Policy used
Policy DisplayName Policy Id Category Effect State
Add system-assigned managed identity to enable Guest Configuration assignments on virtual machines with no identities 3cf2ab00-13f1-4d0c-8971-2ac904541a7e Guest Configuration Fixed: modify GA
Add system-assigned managed identity to enable Guest Configuration assignments on VMs with a user-assigned identity 497dff13-db2a-4c0f-8603-28fa3b331ab6 Guest Configuration Fixed: modify GA
Deploy the Linux Guest Configuration extension to enable Guest Configuration assignments on Linux VMs 331e8ea8-378a-410f-a2e5-ae22f38bb0da Guest Configuration Fixed: deployIfNotExists GA
Deploy the Windows Guest Configuration extension to enable Guest Configuration assignments on Windows VMs 385f5831-96d4-41db-9a3c-cd3af78aaae6 Guest Configuration Fixed: deployIfNotExists GA
Json 
{
  "properties": {
  "displayName": "[Preview]: Deploy prerequisites to enable Guest Configuration policies on virtual machines",
    "policyType": "BuiltIn",
    "description": "This initiative adds a system-assigned managed identity and deploys the platform-appropriate Guest Configuration extension to virtual machines that are eligible to be monitored by Guest Configuration policies. This is a prerequisite for all Guest Configuration policies and must be assigned to the policy assignment scope before using any Guest Configuration policy. For more information on Guest Configuration, visit https://aka.ms/gcpol.",
    "metadata": {
      "category": "Guest Configuration",
      "version": "1.0.0-preview",
      "preview": true
    },
    "policyDefinitions": [
      {
        "policyDefinitionReferenceId": "Prerequisite_AddSystemIdentityWhenNone",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3cf2ab00-13f1-4d0c-8971-2ac904541a7e"
      },
      {
        "policyDefinitionReferenceId": "Prerequisite_AddSystemIdentityWhenUser",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/497dff13-db2a-4c0f-8603-28fa3b331ab6"
      },
      {
        "policyDefinitionReferenceId": "Prerequisite_DeployExtensionWindows",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/385f5831-96d4-41db-9a3c-cd3af78aaae6"
      },
      {
        "policyDefinitionReferenceId": "Prerequisite_DeployExtensionLinux",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/331e8ea8-378a-410f-a2e5-ae22f38bb0da"
      }
    ]
  },
  "id": "/providers/Microsoft.Authorization/policySetDefinitions/12794019-7a00-42cf-95c2-882eed337cc8",
  "type": "Microsoft.Authorization/policySetDefinitions",
  "name": "12794019-7a00-42cf-95c2-882eed337cc8"
}