last sync: 2025-Feb-14 18:36:54 UTC

Enforce enhanced recovery and backup policies

Azure Landing Zones (ALZ) Policy Initiative (PolicySet)

Source Repository Azure Landing Zones (ALZ) GitHub
JSON Enforce-Backup
Display nameEnforce enhanced recovery and backup policies
IdEnforce-Backup
Version1.1.0
Details on versioning
CategoryBackup
DescriptionEnforce enhanced recovery and backup policies on assigned scopes.
Cloud environments AzureChinaCloud
AzureCloud
AzureUSGovernment
TypeCustom Azure Landing Zones (ALZ)
DeprecatedFalse
PreviewFalse
Policy count Total Policies: 6
Builtin Policies: 6
Static Policies: 0
ALZ Policies: 0
Policy used
Policy DisplayName Policy Id Category Effect Roles# Roles State Type policy in AzUSGov
[Preview]: Immutability must be enabled for backup vaults 2514263b-bc0d-4b06-ac3e-f262c0979018 Backup Default
Audit
Allowed
Audit, Disabled
0 Preview BuiltIn unknown
[Preview]: Immutability must be enabled for Recovery Services vaults d6f6f560-14b7-49a4-9fc8-d2c3a9807868 Backup Default
Audit
Allowed
Audit, Disabled
0 Preview BuiltIn unknown
[Preview]: Multi-User Authorization (MUA) must be enabled for Backup Vaults. c58e083e-7982-4e24-afdc-be14d312389e Backup Default
Audit
Allowed
Audit, Disabled
0 Preview BuiltIn unknown
[Preview]: Multi-User Authorization (MUA) must be enabled for Recovery Services Vaults. c7031eab-0fc0-4cd9-acd0-4497bd66d91a Backup Default
Audit
Allowed
Audit, Disabled
0 Preview BuiltIn unknown
[Preview]: Soft delete must be enabled for Recovery Services Vaults. 31b8092a-36b8-434b-9af7-5ec844364148 Backup Default
Audit
Allowed
Audit, Disabled
0 Preview BuiltIn unknown
[Preview]: Soft delete should be enabled for Backup Vaults 9798d31d-6028-4dee-8643-46102185c016 Backup Default
Audit
Allowed
Audit, Disabled
0 Preview BuiltIn unknown
Roles used
No Roles used
History none
JSON compare n/a
JSON
EPAC