Skip to content

Commit 1b69419

Browse files
madiepevmadiepev
authored
Merge pull request #5 from ZekeStarr/main
Azure Policies
2 parents 985d342 + 580823f commit 1b69419

File tree

3 files changed

+111
-0
lines changed

3 files changed

+111
-0
lines changed

‎Policies/DP-100 Base + LP11.json

+52
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,52 @@
1+
{
2+
"if": {
3+
"not": {
4+
"anyOf": [
5+
{
6+
"field": "type",
7+
"contains": "Microsoft.Storage/storageAccounts"
8+
},
9+
{
10+
"field": "type",
11+
"contains": "Microsoft.insights/"
12+
},
13+
{
14+
"field": "type",
15+
"contains": "Microsoft.ContainerInstance/containerGroups"
16+
},
17+
{
18+
"field": "type",
19+
"contains": "Microsoft.ContainerRegistry/registries"
20+
},
21+
{
22+
"field": "type",
23+
"contains": "Microsoft.KeyVault/vaults"
24+
},
25+
{
26+
"field": "type",
27+
"contains": "Microsoft.AlertsManagement/smartDetectorAlertRules"
28+
},
29+
{
30+
"field": "type",
31+
"contains": "Microsoft.OperationalInsights/workspaces"
32+
},
33+
{
34+
"field":"type",
35+
"equals":"Microsoft.MachineLearningServices/workspaces"
36+
},
37+
{
38+
"field":"type",
39+
"contains":"Microsoft.MachineLearningServices/workspaces/onlineEndpoints"
40+
},
41+
{
42+
"field":"type",
43+
"contains":"Microsoft.MachineLearningServices/workspaces/batchEndpoints"
44+
}
45+
]
46+
47+
}
48+
},
49+
"then": {
50+
"effect": "Deny"
51+
}
52+
}

‎Policies/DP-100 Base.json

+44
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,44 @@
1+
{
2+
"if": {
3+
"not": {
4+
"anyOf": [
5+
{
6+
"field": "type",
7+
"contains": "Microsoft.Storage/storageAccounts"
8+
},
9+
{
10+
"field": "type",
11+
"contains": "Microsoft.insights/"
12+
},
13+
{
14+
"field": "type",
15+
"contains": "Microsoft.ContainerInstance/containerGroups"
16+
},
17+
{
18+
"field": "type",
19+
"contains": "Microsoft.ContainerRegistry/registries"
20+
},
21+
{
22+
"field": "type",
23+
"contains": "Microsoft.KeyVault/vaults"
24+
},
25+
{
26+
"field": "type",
27+
"contains": "Microsoft.AlertsManagement/smartDetectorAlertRules"
28+
},
29+
{
30+
"field": "type",
31+
"contains": "Microsoft.OperationalInsights/workspaces"
32+
},
33+
{
34+
"field":"type",
35+
"equals":"Microsoft.MachineLearningServices/workspaces"
36+
}
37+
]
38+
39+
}
40+
},
41+
"then": {
42+
"effect": "Deny"
43+
}
44+
}

‎Policies/Required Resource Providers.md

+15
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,15 @@
1+
## Required Resource Providers
2+
3+
Microsoft.Insights
4+
5+
Microsoft.ContainerInstance
6+
7+
Microsoft.ContainerRegistry
8+
9+
Microsoft.KeyVault
10+
11+
Microsoft.AlertsManagement
12+
13+
Microsoft.OperationalInsights
14+
15+
Microsoft.MachineLearningServices

0 commit comments

Comments
 (0)