Enforce recommended guardrails for Container Instance

Azure Landing Zones (ALZ) Policy Initiative (PolicySet)

Policy types

Policy states

Policy categories

Total Policies: 1
Builtin Policies: 1
Static Policies: 0
ALZ Policies: 0

GA: 1

1 categories:

Container Instance: 1

Rows: 1-1 / 1

Records:

Use the filters above each column to filter and limit table data. Advanced searches can be performed by using the following operators:
<, <=, >, >=, =, *, !, {, }, ||,&&, [empty], [nonempty], rgx:
Learn more

TableFilter v0.7.3

https://www.tablefilter.com/
©2015-2025 Max Guglielmi

Page of 1

Policy DisplayName

Policy Id

Category

Effect

Roles#

Roles

State

Type

policy in AzUSGov

Azure Container Instance container group should deploy into a virtual network

8af8f826-edcb-4178-b35f-851ea6fea615

Container Instance

Default
Audit
Allowed
Audit, Disabled, Deny

BuiltIn

unknown

{

policyType: "Custom",
displayName: "Enforce recommended guardrails for Container Instance",
description: "This policy initiative is a group of policies that ensures Container Apps is compliant per regulated Landing Zones.",
metadata: {4 items
- version: "1.1.0",
- category: "Container Instances",
- source: "https://github.com/Azure/Enterprise-Scale/",
- alzCloudEnvironments: [3 items
  - "AzureCloud",
  - "AzureChinaCloud",
  - "AzureUSGovernment"
  ]
},
parameters: {1 item
- containerInstanceVnet: {3 items
  - type: "string",
  - defaultValue: "Deny",
  - allowedValues: [3 items
    - "Audit",
    - "Deny",
    - "Disabled"
    ]
  }
},
policyDefinitions: [1 item
- {5 items
  - policyDefinitionId: /providers/Microsoft.Authorization/policyDefinitions/8af8f826-edcb-4178-b35f-851ea6fea615 Azure Container Instance container group should deploy into a virtual network ,
  - policyDefinitionReferenceId: "Deny-ContainerInstance-Vnet",
  - definitionVersion: 2.*.*2.0.0,
  - groupNames: [],
  - parameters: {1 item
    - effect: {1 item
      - value: "[parameters('containerInstanceVnet')]"
      }
    }
  }
],
policyDefinitionGroups: null

}