last sync: 2025-Apr-29 17:15:47 UTC

Sovereignty Baseline - Global Policies

Azure BuiltIn Policy Initiative (PolicySet)

Source Azure Portal
Display nameSovereignty Baseline - Global Policies
Idc1cbff38-87c0-4b9f-9f70-035c7a3b5523
Version1.2.0
Details on versioning
Versioning Versions supported for Versioning: 4
1.2.0
1.1.1
1.1.0-preview
1.0.0-preview
Built-in Versioning [Preview]
CategoryRegulatory Compliance
Microsoft Learn
DescriptionThe Microsoft Cloud for Sovereignty recommends global policies to help organizations achieve their sovereignty goals by default denying the creation of resources outside of approved regions. More details can be found here: https://aka.ms/SovereigntyBaselinePolicies
Cloud environmentsAzureCloud = true
AzureChinaCloud = unknown
AzureUSGovernment = unknown
Available in AzUSGovUnknown, no evidence if PolicySet definition is/not available in AzureUSGovernment
TypeBuiltIn
DeprecatedFalse
PreviewFalse
Policy-used summary
Policy types Policy states Policy categories
Total Policies: 5
Builtin Policies: 5
Static Policies: 0
GA: 5
3 categories:
Cosmos DB: 1
General: 2
Trusted Launch: 2
Policy-used
Policy DisplayName Policy Id Category Version Versioning Effect Roles# Roles State policy in AzUSGov
Allowed locations e56962a6-4747-49cd-b67b-bf8b01975c4c General 1.0.0 1x
1.0.0
Fixed
deny
0 GA unknown
Allowed locations for resource groups e765b5de-1225-4ba3-bd56-1ac6695af988 General 1.0.0 1x
1.0.0
Fixed
deny
0 GA unknown
Azure Cosmos DB allowed locations 0473574d-2d43-4217-aefe-941fcdf7e684 Cosmos DB 1.1.0 1x
1.1.0
Default
Deny
Allowed
audit, Audit, deny, Deny, disabled, Disabled
0 GA unknown
Disks and OS image should support TrustedLaunch b03bb370-5249-4ea4-9fce-2552e87e45fa Trusted Launch 1.0.0 1x
1.0.0
Default
Audit
Allowed
Audit, Disabled
0 GA unknown
Virtual Machine should have TrustedLaunch enabled c95b54ad-0614-4633-ab29-104b01235cbf Trusted Launch 1.0.0 1x
1.0.0
Default
Audit
Allowed
Audit, Disabled
0 GA unknown
Roles used No Roles used
History
Date/Time (UTC ymd) (i) Changes
2025-04-24 19:52:16 Version change: '1.1.1' to '1.2.0'
2025-03-06 18:27:48 Name change: '[Preview]: Sovereignty Baseline - Global Policies' to 'Sovereignty Baseline - Global Policies'
Version change: '1.1.0-preview' to '1.1.1'
2024-08-08 18:19:51 add Policy Virtual Machine should have TrustedLaunch enabled (c95b54ad-0614-4633-ab29-104b01235cbf)
add Policy Disks and OS image should support TrustedLaunch (b03bb370-5249-4ea4-9fce-2552e87e45fa)
Version change: '1.0.0-preview' to '1.1.0-preview'
2023-12-12 19:47:53 add Initiative c1cbff38-87c0-4b9f-9f70-035c7a3b5523
JSON compare
compare mode: version left: version right:
JSON
api-version=2023-04-01
EPAC