AzInitiativeAdvertizer

last sync: 2024-May-08 17:44:36 UTC

[Preview]: Resources should be Zone Resilient

Azure BuiltIn Policy Initiative (PolicySet)

Source Azure Portal
Display name[Preview]: Resources should be Zone Resilient
Id130fb88f-0fc9-4678-bfe1-31022d71c7d5
Version1.10.0-preview
Details on versioning
CategoryResilience
Microsoft Learn
DescriptionSome resource types can be deployed Zone Redundant (e.g. SQL Databases); some can be deploy Zone Aligned (e.g. Virtual Machines); and some can be deployed either Zone Aligned or Zone Redundant (e.g. Virtual Machine Scale Sets). Being zone aligned does not guarantee resilience, but it is the foundation on which a resilient solution can be built (e.g. three Virtual Machine Scale Sets zone aligned to three different zones in the same region with a load balancer). See https://aka.ms/AZResilience for more info.
TypeBuiltIn
DeprecatedFalse
PreviewTrue
Policy count Total Policies: 34
Builtin Policies: 34
Static Policies: 0
Policy used
Policy DisplayName Policy Id Category Effect Roles# Roles State
[Preview]: API Management Service should be Zone Redundant 42daa904-5969-47ef-92cb-b75df946195a Resilience Default
Audit
Allowed
Audit, Deny, Disabled		 0 Preview
[Preview]: App Service Plans should be Zone Redundant 22888755-d824-4e43-8e0b-42d481836554 Resilience Default
Audit
Allowed
Audit, Deny, Disabled		 0 Preview
[Preview]: Application Gateways should be Zone Resilient 493c215c-0553-4976-bc81-57d2c04fc8c1 Resilience Default
Audit
Allowed
Audit, Deny, Disabled		 0 Preview
[Preview]: Azure AI Search Service should be Zone Redundant 90bc8109-d21a-4692-88fc-51419391da3d Resilience Default
Audit
Allowed
Audit, Deny, Disabled		 0 Preview
[Preview]: Azure Cache for Redis Enterprise & Flash should be Zone Redundant 408934a8-941a-4c1e-ba88-dd035d9688f4 Resilience Default
Audit
Allowed
Audit, Deny, Disabled		 0 Preview
[Preview]: Azure Cache for Redis should be Zone Redundant 1bf67da8-b100-45bf-b89d-e4669fc54411 Resilience Default
Audit
Allowed
Audit, Deny, Disabled		 0 Preview
[Preview]: Azure Data Explorer Clusters should be Zone Redundant cbe58ab0-07a8-43ea-9ccc-8ea33e4d6aa5 Resilience Default
Audit
Allowed
Audit, Deny, Disabled		 0 Preview
[Preview]: Azure Database for MySQL Flexible Server should be Zone Resilient 493c215d-2554-5976-bc81-57d2c04fc8c1 Resilience Default
Audit
Allowed
Audit, Deny, Disabled		 0 Preview
[Preview]: Azure Database for PostgreSQL Flexible Server should be Zone Resilient 493c215d-2553-4976-bc81-57d2c04fc8c1 Resilience Default
Audit
Allowed
Audit, Deny, Disabled		 0 Preview
[Preview]: Azure HDInsight should be Zone Aligned bf45a74c-ed4f-4300-8afe-d6f0abdfe75b Resilience Default
Audit
Allowed
Audit, Deny, Disabled		 0 Preview
[Preview]: Azure Kubernetes Service Managed Clusters should be Zone Redundant 2dec5f47-bc40-40d1-8c7d-a39d9d6808d1 Resilience Default
Audit
Allowed
Audit, Deny, Disabled		 0 Preview
[Preview]: Azure Managed Grafana should be Zone Redundant bdd8bbb2-1efd-48dc-a0fd-8ddcba2e96cd Resilience Default
Audit
Allowed
Audit, Deny, Disabled		 0 Preview
[Preview]: Backup and Site Recovery should be Zone Redundant ae243d87-5cf3-4dce-90bd-6d62be328de3 Resilience Default
Audit
Allowed
Audit, Deny, Disabled		 0 Preview
[Preview]: Backup Vaults should be Zone Redundant 4bd1f3c0-9443-49ad-b8bc-7c17a92b5924 Resilience Default
Audit
Allowed
Audit, Deny, Disabled		 0 Preview
[Preview]: Container App should be Zone Redundant 42daa904-5969-47ef-92fb-b75df946195a Resilience Default
Audit
Allowed
Audit, Deny, Disabled		 0 Preview
[Preview]: Container Instances should be Zone Aligned f58e8c0a-3c79-431a-abf8-cd1b895478e8 Resilience Default
Audit
Allowed
Audit, Deny, Disabled		 0 Preview
[Preview]: Container Registry should be Zone Redundant 9d2b0a20-57d6-474c-9d12-44a4a20999c6 Resilience Default
Audit
Allowed
Audit, Deny, Disabled		 0 Preview
[Preview]: Cosmos Database Accounts should be Zone Redundant 44c5a1f9-7ef6-4c38-880c-273e8f7a3c24 Resilience Default
Audit
Allowed
Audit, Deny, Disabled		 0 Preview
[Preview]: Event Hubs should be Zone Redundant ae243d87-5cf3-4dce-90bd-6d62be328de9 Resilience Default
Audit
Allowed
Audit, Deny, Disabled		 0 Preview
[Preview]: Firewalls should be Zone Resilient 18314dc7-a25d-420c-a069-f094b25ff91b Resilience Default
Audit
Allowed
Audit, Deny, Disabled		 0 Preview
[Preview]: Load Balancers should be Zone Resilient 42daa901-5969-47ef-92cb-b75df946195a Resilience Default
Audit
Allowed
Audit, Deny, Disabled		 0 Preview
[Preview]: Managed Disks should be Zone Resilient 344ea7ca-2ba8-4d68-859b-317239714b2c Resilience Default
Audit
Allowed
Audit, Deny, Disabled		 0 Preview
[Preview]: NAT gateway should be Zone Aligned 18314dc7-a25d-420c-a069-f094b25ff919 Resilience Default
Audit
Allowed
Audit, Deny, Disabled		 0 Preview
[Preview]: Public IP addresses should be Zone Resilient 682e4ab9-59fe-4871-9839-265b54c568c4 Resilience Default
Audit
Allowed
Audit, Deny, Disabled		 0 Preview
[Preview]: Public IP Prefixes should be Zone Resilient 2dba5c7e-12a4-4be8-b208-f59bc49e88c2 Resilience Default
Audit
Allowed
Audit, Deny, Disabled		 0 Preview
[Preview]: Service Bus should be Zone Redundant d3ee5dcf-0c6d-49ab-aee4-f250583a7bdc Resilience Default
Audit
Allowed
Audit, Deny, Disabled		 0 Preview
[Preview]: Service Fabric Clusters should be Zone Redundant 075896de-f4f8-465b-b6d8-9e73725bb62d Resilience Default
Audit
Allowed
Audit, Deny, Disabled		 0 Preview
[Preview]: SQL Databases should be Zone Redundant 6221cac0-bb8d-40f4-9535-5d03f713f054 Resilience Default
Audit
Allowed
Audit, Deny, Disabled		 0 Preview
[Preview]: SQL Elastic database pools should be Zone Redundant f16a3ca9-b57a-4392-b660-4c1f8442aa8d Resilience Default
Audit
Allowed
Audit, Deny, Disabled		 0 Preview
[Preview]: SQL Managed Instances should be Zone Redundant 0fc92280-604b-4f23-9e04-5ef98d1a28df Resilience Default
Audit
Allowed
Audit, Deny, Disabled		 0 Preview
[Preview]: Storage Accounts should be Zone Redundant 85b005b2-95fc-4953-b9cb-f9ee6427c754 Resilience Default
Audit
Allowed
Audit, Deny, Disabled		 0 Preview
[Preview]: Virtual Machine Scale Sets should be Zone Resilient d3903bdf-ab85-4cce-85d3-2934d77629d4 Resilience Default
Audit
Allowed
Audit, Deny, Disabled		 0 Preview
[Preview]: Virtual Machines should be Zone Aligned 42f4f3a2-7d20-4c13-a05d-01857a626c22 Resilience Default
Audit
Allowed
Audit, Deny, Disabled		 0 Preview
[Preview]: Virtual network gateways should be Zone Redundant da8a2248-6b4a-44a7-96bf-bf1c0dd208c3 Resilience Default
Audit
Allowed
Audit, Deny, Disabled		 0 Preview
Roles used No Roles used
History
Date/Time (UTC ymd) (i) Changes
2024-02-23 19:01:26 add Policy [Preview]: Backup and Site Recovery should be Zone Redundant (ae243d87-5cf3-4dce-90bd-6d62be328de3)
add Policy [Preview]: Backup Vaults should be Zone Redundant (4bd1f3c0-9443-49ad-b8bc-7c17a92b5924)
add Policy [Preview]: Azure HDInsight should be Zone Aligned (bf45a74c-ed4f-4300-8afe-d6f0abdfe75b)
add Policy [Preview]: Container Instances should be Zone Aligned (f58e8c0a-3c79-431a-abf8-cd1b895478e8)
add Policy [Preview]: Application Gateways should be Zone Resilient (493c215c-0553-4976-bc81-57d2c04fc8c1)
add Policy [Preview]: Azure AI Search Service should be Zone Redundant (90bc8109-d21a-4692-88fc-51419391da3d)
add Policy [Preview]: Azure Database for MySQL Flexible Server should be Zone Resilient (493c215d-2554-5976-bc81-57d2c04fc8c1)
add Policy [Preview]: Container App should be Zone Redundant (42daa904-5969-47ef-92fb-b75df946195a)
add Policy [Preview]: Azure Database for PostgreSQL Flexible Server should be Zone Resilient (493c215d-2553-4976-bc81-57d2c04fc8c1)
add Policy [Preview]: Load Balancers should be Zone Resilient (42daa901-5969-47ef-92cb-b75df946195a)
add Policy [Preview]: NAT gateway should be Zone Aligned (18314dc7-a25d-420c-a069-f094b25ff919)
add Policy [Preview]: Firewalls should be Zone Resilient (18314dc7-a25d-420c-a069-f094b25ff91b)
Version change: '1.7.0-preview' to '1.10.0-preview'
2023-12-12 19:47:53 add Policy [Preview]: Azure Managed Grafana should be Zone Redundant (bdd8bbb2-1efd-48dc-a0fd-8ddcba2e96cd)
add Policy [Preview]: App Service Plans should be Zone Redundant (22888755-d824-4e43-8e0b-42d481836554)
add Policy [Preview]: Public IP addresses should be Zone Resilient (682e4ab9-59fe-4871-9839-265b54c568c4)
add Policy [Preview]: Public IP Prefixes should be Zone Resilient (2dba5c7e-12a4-4be8-b208-f59bc49e88c2)
add Policy [Preview]: Virtual network gateways should be Zone Redundant (da8a2248-6b4a-44a7-96bf-bf1c0dd208c3)
add Policy [Preview]: Managed Disks should be Zone Resilient (344ea7ca-2ba8-4d68-859b-317239714b2c)
add Policy [Preview]: SQL Managed Instances should be Zone Redundant (0fc92280-604b-4f23-9e04-5ef98d1a28df)
add Policy [Preview]: Event Hubs should be Zone Redundant (ae243d87-5cf3-4dce-90bd-6d62be328de9)
add Policy [Preview]: Service Fabric Clusters should be Zone Redundant (075896de-f4f8-465b-b6d8-9e73725bb62d)
add Policy [Preview]: SQL Databases should be Zone Redundant (6221cac0-bb8d-40f4-9535-5d03f713f054)
add Policy [Preview]: Azure Kubernetes Service Managed Clusters should be Zone Redundant (2dec5f47-bc40-40d1-8c7d-a39d9d6808d1)
add Policy [Preview]: SQL Elastic database pools should be Zone Redundant (f16a3ca9-b57a-4392-b660-4c1f8442aa8d)
Version change: '1.4.0-preview' to '1.7.0-preview'
2023-11-09 19:39:25 add Policy [Preview]: Container Registry should be Zone Redundant (9d2b0a20-57d6-474c-9d12-44a4a20999c6)
add Policy [Preview]: Azure Cache for Redis should be Zone Redundant (1bf67da8-b100-45bf-b89d-e4669fc54411)
add Policy [Preview]: Azure Data Explorer Clusters should be Zone Redundant (cbe58ab0-07a8-43ea-9ccc-8ea33e4d6aa5)
add Policy [Preview]: API Management Service should be Zone Redundant (42daa904-5969-47ef-92cb-b75df946195a)
add Policy [Preview]: Azure Cache for Redis Enterprise & Flash should be Zone Redundant (408934a8-941a-4c1e-ba88-dd035d9688f4)
add Policy [Preview]: Storage Accounts should be Zone Redundant (85b005b2-95fc-4953-b9cb-f9ee6427c754)
add Policy [Preview]: Service Bus should be Zone Redundant (d3ee5dcf-0c6d-49ab-aee4-f250583a7bdc)
Version change: '1.1.0-preview' to '1.4.0-preview'
2023-11-03 19:40:09 add Initiative 130fb88f-0fc9-4678-bfe1-31022d71c7d5
JSON compare
compare mode: version left: version right:
JSON
api-version=2021-06-01
EPAC