AzInitiativeAdvertizer

last sync: 2020-Sep-25 13:37:27 UTC

Azure Policy Initiative

[Preview]: Deploy prerequisites to enable Guest Configuration policies on virtual machines

Initiative DisplayName [Preview]: Deploy prerequisites to enable Guest Configuration policies on virtual machines
Initiative Id 12794019-7a00-42cf-95c2-882eed337cc8
Initiative Category Guest Configuration
Initiative Description This initiative adds a system-assigned managed identity and deploys the platform-appropriate Guest Configuration extension to virtual machines that are eligible to be monitored by Guest Configuration policies. This is a prerequisite for all Guest Configuration policies and must be assigned to the policy assignment scope before using any Guest Configuration policy. For more information on Guest Configuration, visit https://aka.ms/gcpol.
Initiative Type BuiltIn
Initiative Changes
Date/Time (UTC ymd) (i) Change(s)
2020-07-17 15:57:10 add Initiative 12794019-7a00-42cf-95c2-882eed337cc8
2020-06-29 05:46:42 remove Initiative 12794019-7a00-42cf-95c2-882eed337cc8
2020-06-23 16:03:23 add Initiative 12794019-7a00-42cf-95c2-882eed337cc8
Initiative Policies count Total Policies: 4
Builtin Policies: 4/4
Static Policies: 0/4
Initiative Policies
Policy DisplayName Policy Id
Deploy the Windows Guest Configuration extension to enable Guest Configuration assignments on Windows VMs 385f5831-96d4-41db-9a3c-cd3af78aaae6
Add system-assigned managed identity to enable Guest Configuration assignments on virtual machines with no identities 3cf2ab00-13f1-4d0c-8971-2ac904541a7e
Add system-assigned managed identity to enable Guest Configuration assignments on VMs with a user-assigned identity 497dff13-db2a-4c0f-8603-28fa3b331ab6
Deploy the Linux Guest Configuration extension to enable Guest Configuration assignments on Linux VMs 331e8ea8-378a-410f-a2e5-ae22f38bb0da
Initiative Rule 
{
  "properties": {
  "displayName": "[Preview]: Deploy prerequisites to enable Guest Configuration policies on virtual machines",
    "policyType": "BuiltIn",
    "description": "This initiative adds a system-assigned managed identity and deploys the platform-appropriate Guest Configuration extension to virtual machines that are eligible to be monitored by Guest Configuration policies. This is a prerequisite for all Guest Configuration policies and must be assigned to the policy assignment scope before using any Guest Configuration policy. For more information on Guest Configuration, visit https://aka.ms/gcpol.",
    "metadata": {
      "category": "Guest Configuration",
      "version": "1.0.0-preview",
      "preview": true
    },
    "policyDefinitions": [
      {
        "policyDefinitionReferenceId": "Prerequisite_AddSystemIdentityWhenNone",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3cf2ab00-13f1-4d0c-8971-2ac904541a7e"
      },
      {
        "policyDefinitionReferenceId": "Prerequisite_AddSystemIdentityWhenUser",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/497dff13-db2a-4c0f-8603-28fa3b331ab6"
      },
      {
        "policyDefinitionReferenceId": "Prerequisite_DeployExtensionWindows",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/385f5831-96d4-41db-9a3c-cd3af78aaae6"
      },
      {
        "policyDefinitionReferenceId": "Prerequisite_DeployExtensionLinux",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/331e8ea8-378a-410f-a2e5-ae22f38bb0da"
      }
    ]
  },
  "id": "/providers/Microsoft.Authorization/policySetDefinitions/12794019-7a00-42cf-95c2-882eed337cc8",
  "type": "Microsoft.Authorization/policySetDefinitions",
  "name": "12794019-7a00-42cf-95c2-882eed337cc8"
}