AzInitiativeAdvertizer

last sync: 2021-Oct-15 16:53:14 UTC

Azure Policy Initiative

Deploy prerequisites to enable Guest Configuration policies on virtual machines

Name Deploy prerequisites to enable Guest Configuration policies on virtual machines
Azure Portal

Id 12794019-7a00-42cf-95c2-882eed337cc8

Version 1.0.0
details on versioning

Category Guest Configuration
Microsoft docs

Description This initiative adds a system-assigned managed identity and deploys the platform-appropriate Guest Configuration extension to virtual machines that are eligible to be monitored by Guest Configuration policies. This is a prerequisite for all Guest Configuration policies and must be assigned to the policy assignment scope before using any Guest Configuration policy. For more information on Guest Configuration, visit https://aka.ms/gcpol.

Type BuiltIn

Deprecated False

Preview False

History

Date/Time (UTC ymd) (i)	Changes
2021-05-11 14:06:20	Name change: '[Preview]: Deploy prerequisites to enable Guest Configuration policies on virtual machines' to 'Deploy prerequisites to enable Guest Configuration policies on virtual machines'
2020-07-17 15:57:10	add Initiative 12794019-7a00-42cf-95c2-882eed337cc8
2020-06-29 05:46:42	remove Initiative 12794019-7a00-42cf-95c2-882eed337cc8
2020-06-23 16:03:23	add Initiative 12794019-7a00-42cf-95c2-882eed337cc8

Policy count Total Policies: 4
Builtin Policies: 4
Static Policies: 0

Policy used

Policy DisplayName	Policy Id	Category	Effect	State
Add system-assigned managed identity to enable Guest Configuration assignments on virtual machines with no identities	3cf2ab00-13f1-4d0c-8971-2ac904541a7e	Guest Configuration	Fixed: modify	GA
Add system-assigned managed identity to enable Guest Configuration assignments on VMs with a user-assigned identity	497dff13-db2a-4c0f-8603-28fa3b331ab6	Guest Configuration	Fixed: modify	GA
Deploy the Linux Guest Configuration extension to enable Guest Configuration assignments on Linux VMs	331e8ea8-378a-410f-a2e5-ae22f38bb0da	Guest Configuration	Fixed: deployIfNotExists	GA
Deploy the Windows Guest Configuration extension to enable Guest Configuration assignments on Windows VMs	385f5831-96d4-41db-9a3c-cd3af78aaae6	Guest Configuration	Fixed: deployIfNotExists	GA

JSON

{
  "displayName": "Deploy prerequisites to enable Guest Configuration policies on virtual machines",
  "policyType": "BuiltIn",
  "description": "This initiative adds a system-assigned managed identity and deploys the platform-appropriate Guest Configuration extension to virtual machines that are eligible to be monitored by Guest Configuration policies. This is a prerequisite for all Guest Configuration policies and must be assigned to the policy assignment scope before using any Guest Configuration policy. For more information on Guest Configuration, visit https://aka.ms/gcpol.",
  "metadata": {
    "category": "Guest Configuration",
    "version": "1.0.0"
  },
  "policyDefinitions": [
    {
      "policyDefinitionReferenceId": "Prerequisite_AddSystemIdentityWhenNone",
      "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3cf2ab00-13f1-4d0c-8971-2ac904541a7e"
    },
    {
      "policyDefinitionReferenceId": "Prerequisite_AddSystemIdentityWhenUser",
      "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/497dff13-db2a-4c0f-8603-28fa3b331ab6"
    },
    {
      "policyDefinitionReferenceId": "Prerequisite_DeployExtensionWindows",
      "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/385f5831-96d4-41db-9a3c-cd3af78aaae6"
    },
    {
      "policyDefinitionReferenceId": "Prerequisite_DeployExtensionLinux",
      "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/331e8ea8-378a-410f-a2e5-ae22f38bb0da"
    }
  ]
}