Cyber_Essentials_v3.1.json

{
  "properties": {
    "displayName": "Cyber Essentials v3.1",
    "policyType": "BuiltIn",
    "description": "UK certification scheme to protect against common cyber threats through basic security controls.",
    "metadata": {
      "version": "1.0.0",
      "category": "Regulatory Compliance"
    },
    "version": "1.0.0",
    "versions": [
      "1.0.0"
    ],
    "policyDefinitionGroups": [
      {
        "name": "Cyber_Essentials_v3.1_4",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/Cyber_Essentials_v3.1_4"
      },
      {
        "name": "Cyber_Essentials_v3.1_2",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/Cyber_Essentials_v3.1_2"
      },
      {
        "name": "Cyber_Essentials_v3.1_5",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/Cyber_Essentials_v3.1_5"
      },
      {
        "name": "Cyber_Essentials_v3.1_",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/Cyber_Essentials_v3.1_"
      },
      {
        "name": "Cyber_Essentials_v3.1_3",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/Cyber_Essentials_v3.1_3"
      },
      {
        "name": "Cyber_Essentials_v3.1_1",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/Cyber_Essentials_v3.1_1"
      }
    ],
    "parameters": {
      "effect-f655e522-adff-494d-95c2-52d4f6d56a42": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-40e85574-ef33-47e8-a854-7a65c7500560": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "IncludeArcMachines-ea53dbee-c6c9-4f0e-9f9e-de0039b78023": {
        "type": "string",
        "defaultValue": "false",
        "allowedValues": [
          "true",
          "false"
        ],
        "metadata": {
          "displayName": "Include Arc connected servers",
          "description": "By selecting this option, you agree to be charged monthly per Arc connected machine.",
          "portalReview": "true"
        }
      },
      "effect-ea53dbee-c6c9-4f0e-9f9e-de0039b78023": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-3b980d31-7904-4bb7-8575-5665739a8052": {
        "type": "String",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "operationName-3b980d31-7904-4bb7-8575-5665739a8052": {
        "type": "String",
        "allowedValues": [
          "Microsoft.Security/policies/write",
          "Microsoft.Security/securitySolutions/write",
          "Microsoft.Security/securitySolutions/delete"
        ],
        "metadata": {
          "displayName": "Operation Name",
          "description": "Security Operation name for which activity log alert should exist"
        }
      },
      "effect-a1817ec0-a368-432a-8057-8371e17ac6ee": {
        "type": "string",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-2913021d-f2fd-4f3d-b958-22354e2bdbcb": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-0a15ec92-a229-4763-bb14-0ea34a568f8d": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-0e60b895-3786-45da-8377-9c6b4b6ac5f9": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-055aa869-bc98-4af8-bafc-23f1ab6ffe2c": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-a1181c5f-672a-477a-979a-7d58aa086233": {
        "type": "string",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-501541f7-f7e7-4cd6-868c-4190fdad3ac9": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "source-c26596ff-4d70-4e6a-9a30-c2506bd2f80c": {
        "type": "String",
        "defaultValue": "Original",
        "allowedValues": [
          "All",
          "Generated",
          "Original"
        ],
        "metadata": {
          "displayName": "Source",
          "description": "The source k8s object for constraint evaluation. 'Original' means only evaluate against the specific GroupVersionKind specified in the policy definition. 'Generated' means only evaluate against k8s objects generated by Gatekeeper ExpansionTemplates. 'All' means evaluate against both the original object and any generated ones."
        }
      },
      "warn-c26596ff-4d70-4e6a-9a30-c2506bd2f80c": {
        "type": "Boolean",
        "defaultValue": false,
        "metadata": {
          "displayName": "Warn",
          "description": "Whether or not to return warnings back to the user in the kubectl cli"
        }
      },
      "effect-c26596ff-4d70-4e6a-9a30-c2506bd2f80c": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "excludedNamespaces-c26596ff-4d70-4e6a-9a30-c2506bd2f80c": {
        "type": "Array",
        "defaultValue": [
          "kube-system",
          "gatekeeper-system",
          "azure-arc",
          "azure-extensions-usage-system"
        ],
        "metadata": {
          "displayName": "Namespace exclusions",
          "description": "List of Kubernetes namespaces to exclude from policy evaluation. System namespaces \"kube-system\", \"gatekeeper-system\" and \"azure-arc\" are always excluded by design. \"azure-extensions-usage-system\" is optional to remove."
        }
      },
      "namespaces-c26596ff-4d70-4e6a-9a30-c2506bd2f80c": {
        "type": "Array",
        "defaultValue": [],
        "metadata": {
          "displayName": "Namespace inclusions",
          "description": "List of Kubernetes namespaces to only include in policy evaluation. An empty list means the policy is applied to all resources in all namespaces."
        }
      },
      "labelSelector-c26596ff-4d70-4e6a-9a30-c2506bd2f80c": {
        "type": "object",
        "defaultValue": {},
        "metadata": {
          "displayName": "Kubernetes label selector",
          "description": "Label query to select Kubernetes resources for policy evaluation. An empty label selector matches all Kubernetes resources."
        }
      },
      "allowedCapabilities-c26596ff-4d70-4e6a-9a30-c2506bd2f80c": {
        "type": "Array",
        "defaultValue": [],
        "metadata": {
          "displayName": "Allowed capabilities",
          "description": "The list of capabilities that are allowed to be added to a container. Provide empty list as input to block everything.",
          "portalReview": true
        }
      },
      "requiredDropCapabilities-c26596ff-4d70-4e6a-9a30-c2506bd2f80c": {
        "type": "Array",
        "defaultValue": [],
        "metadata": {
          "displayName": "Required drop capabilities",
          "description": "The list of capabilities that must be dropped by a container.",
          "portalReview": true
        }
      },
      "excludedContainers-c26596ff-4d70-4e6a-9a30-c2506bd2f80c": {
        "type": "Array",
        "defaultValue": [],
        "metadata": {
          "displayName": "Containers exclusions",
          "description": "The list of InitContainers and Containers to exclude from policy evaluation. The identify is the name of container. Use an empty list to apply this policy to all containers in all namespaces."
        }
      },
      "excludedImages-c26596ff-4d70-4e6a-9a30-c2506bd2f80c": {
        "type": "Array",
        "defaultValue": [],
        "metadata": {
          "displayName": "Image exclusions",
          "description": "The list of InitContainers and Containers to exclude from policy evaluation. The identifier is the image of container. Prefix-matching can be signified with `*`. For example: `myregistry.azurecr.io/istio:*`. It is recommended that users use the fully-qualified Docker image name (e.g. start with a domain name) in order to avoid unexpectedly exempting images from an untrusted repository.",
          "portalReview": true
        }
      },
      "effect-98728c90-32c7-4049-8429-847dc0f4fe37": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-5450f5bd-9c72-4390-a9c4-a7aba4edfdd2": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "IncludeArcMachines-33936777-f2ac-45aa-82ec-07958ec9ade4": {
        "type": "string",
        "defaultValue": "false",
        "allowedValues": [
          "true",
          "false"
        ],
        "metadata": {
          "displayName": "Include Arc connected servers",
          "description": "By selecting this option, you agree to be charged monthly per Arc connected machine.",
          "portalReview": "true"
        }
      },
      "AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits-33936777-f2ac-45aa-82ec-07958ec9ade4": {
        "type": "string",
        "defaultValue": "0",
        "metadata": {
          "displayName": "Audit: Shut down system immediately if unable to log security audits",
          "description": "Audits if the system will shut down when unable to log Security events."
        }
      },
      "effect-33936777-f2ac-45aa-82ec-07958ec9ade4": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-152b15f7-8e1f-4c1f-ab71-8c010ba5dbc0": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "IncludeArcMachines-1221c620-d201-468c-81e7-2817e6107e84": {
        "type": "string",
        "defaultValue": "false",
        "allowedValues": [
          "true",
          "false"
        ],
        "metadata": {
          "displayName": "Include Arc connected servers",
          "description": "By selecting this option, you agree to be charged monthly per Arc connected machine.",
          "portalReview": "true"
        }
      },
      "NetworkSecurityConfigureEncryptionTypesAllowedForKerberos-1221c620-d201-468c-81e7-2817e6107e84": {
        "type": "string",
        "defaultValue": "2147483644",
        "metadata": {
          "displayName": "Network Security: Configure encryption types allowed for Kerberos",
          "description": "Specifies the encryption types that Kerberos is allowed to use."
        }
      },
      "NetworkSecurityLANManagerAuthenticationLevel-1221c620-d201-468c-81e7-2817e6107e84": {
        "type": "string",
        "defaultValue": "5",
        "metadata": {
          "displayName": "Network security: LAN Manager authentication level",
          "description": "Specify which challenge-response authentication protocol is used for network logons. This choice affects the level of authentication protocol used by clients, the level of session security negotiated, and the level of authentication accepted by servers."
        }
      },
      "NetworkSecurityLDAPClientSigningRequirements-1221c620-d201-468c-81e7-2817e6107e84": {
        "type": "string",
        "defaultValue": "1",
        "metadata": {
          "displayName": "Network security: LDAP client signing requirements",
          "description": "Specify the level of data signing that is requested on behalf of clients that issue LDAP BIND requests."
        }
      },
      "NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients-1221c620-d201-468c-81e7-2817e6107e84": {
        "type": "string",
        "defaultValue": "537395200",
        "metadata": {
          "displayName": "Network security: Minimum session security for NTLM SSP based (including secure RPC) clients",
          "description": "Specifies which behaviors are allowed by clients for applications using the NTLM Security Support Provider (SSP). The SSP Interface (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers for more information."
        }
      },
      "NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers-1221c620-d201-468c-81e7-2817e6107e84": {
        "type": "string",
        "defaultValue": "537395200",
        "metadata": {
          "displayName": "Network security: Minimum session security for NTLM SSP based (including secure RPC) servers",
          "description": "Specifies which behaviors are allowed by servers for applications using the NTLM Security Support Provider (SSP). The SSP Interface (SSPI) is used by applications that need authentication services."
        }
      },
      "effect-1221c620-d201-468c-81e7-2817e6107e84": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "IncludeArcMachines-87845465-c458-45f3-af66-dcd62176f397": {
        "type": "string",
        "defaultValue": "false",
        "allowedValues": [
          "true",
          "false"
        ],
        "metadata": {
          "displayName": "Include Arc connected servers",
          "description": "By selecting this option, you agree to be charged monthly per Arc connected machine.",
          "portalReview": "true"
        }
      },
      "effect-87845465-c458-45f3-af66-dcd62176f397": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "IncludeArcMachines-e6955644-301c-44b5-a4c4-528577de6861": {
        "type": "string",
        "defaultValue": "false",
        "allowedValues": [
          "true",
          "false"
        ],
        "metadata": {
          "displayName": "Include Arc connected servers",
          "description": "By selecting this option, you agree to be charged monthly per Arc connected machine.",
          "portalReview": "true"
        }
      },
      "effect-e6955644-301c-44b5-a4c4-528577de6861": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-1b8ca024-1d5c-4dec-8995-b1a932b41780": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-0da106f2-4ca3-48e8-bc85-c638fe6aea8f": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "source-df49d893-a74c-421d-bc95-c663042e5b80": {
        "type": "String",
        "defaultValue": "Original",
        "allowedValues": [
          "All",
          "Generated",
          "Original"
        ],
        "metadata": {
          "displayName": "Source",
          "description": "The source k8s object for constraint evaluation. 'Original' means only evaluate against the specific GroupVersionKind specified in the policy definition. 'Generated' means only evaluate against k8s objects generated by Gatekeeper ExpansionTemplates. 'All' means evaluate against both the original object and any generated ones."
        }
      },
      "warn-df49d893-a74c-421d-bc95-c663042e5b80": {
        "type": "Boolean",
        "defaultValue": false,
        "metadata": {
          "displayName": "Warn",
          "description": "Whether or not to return warnings back to the user in the kubectl cli"
        }
      },
      "effect-df49d893-a74c-421d-bc95-c663042e5b80": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "excludedNamespaces-df49d893-a74c-421d-bc95-c663042e5b80": {
        "type": "Array",
        "defaultValue": [
          "kube-system",
          "gatekeeper-system",
          "azure-arc",
          "azure-extensions-usage-system"
        ],
        "metadata": {
          "displayName": "Namespace exclusions",
          "description": "List of Kubernetes namespaces to exclude from policy evaluation. System namespaces \"kube-system\", \"gatekeeper-system\" and \"azure-arc\" are always excluded by design. \"azure-extensions-usage-system\" is optional to remove."
        }
      },
      "namespaces-df49d893-a74c-421d-bc95-c663042e5b80": {
        "type": "Array",
        "defaultValue": [],
        "metadata": {
          "displayName": "Namespace inclusions",
          "description": "List of Kubernetes namespaces to only include in policy evaluation. An empty list means the policy is applied to all resources in all namespaces."
        }
      },
      "labelSelector-df49d893-a74c-421d-bc95-c663042e5b80": {
        "type": "object",
        "defaultValue": {},
        "metadata": {
          "displayName": "Kubernetes label selector",
          "description": "Label query to select Kubernetes resources for policy evaluation. An empty label selector matches all Kubernetes resources."
        }
      },
      "excludedContainers-df49d893-a74c-421d-bc95-c663042e5b80": {
        "type": "Array",
        "defaultValue": [],
        "metadata": {
          "displayName": "Containers exclusions",
          "description": "The list of InitContainers and Containers to exclude from policy evaluation. The identify is the name of container. Use an empty list to apply this policy to all containers in all namespaces."
        }
      },
      "excludedImages-df49d893-a74c-421d-bc95-c663042e5b80": {
        "type": "Array",
        "defaultValue": [],
        "metadata": {
          "displayName": "Image exclusions",
          "description": "The list of InitContainers and Containers to exclude from policy evaluation. The identifier is the image of container. Prefix-matching can be signified with `*`. For example: `myregistry.azurecr.io/istio:*`. It is recommended that users use the fully-qualified Docker image name (e.g. start with a domain name) in order to avoid unexpectedly exempting images from an untrusted repository.",
          "portalReview": true
        }
      },
      "IncludeArcMachines-69bf4abd-ca1e-4cf6-8b5a-762d42e61d4f": {
        "type": "string",
        "defaultValue": "false",
        "allowedValues": [
          "true",
          "false"
        ],
        "metadata": {
          "displayName": "Include Arc connected servers",
          "description": "By selecting this option, you agree to be charged monthly per Arc connected machine.",
          "portalReview": "true"
        }
      },
      "MembersToExclude-69bf4abd-ca1e-4cf6-8b5a-762d42e61d4f": {
        "type": "string",
        "metadata": {
          "displayName": "Members to exclude",
          "description": "A semicolon-separated list of members that should be excluded in the Administrators local group. Ex: Administrator; myUser1; myUser2"
        }
      },
      "source-423dd1ba-798e-40e4-9c4d-b6902674b423": {
        "type": "String",
        "defaultValue": "Original",
        "allowedValues": [
          "All",
          "Generated",
          "Original"
        ],
        "metadata": {
          "displayName": "Source",
          "description": "The source k8s object for constraint evaluation. 'Original' means only evaluate against the specific GroupVersionKind specified in the policy definition. 'Generated' means only evaluate against k8s objects generated by Gatekeeper ExpansionTemplates. 'All' means evaluate against both the original object and any generated ones."
        }
      },
      "warn-423dd1ba-798e-40e4-9c4d-b6902674b423": {
        "type": "Boolean",
        "defaultValue": false,
        "metadata": {
          "displayName": "Warn",
          "description": "Whether or not to return warnings back to the user in the kubectl cli"
        }
      },
      "effect-423dd1ba-798e-40e4-9c4d-b6902674b423": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "excludedImages-423dd1ba-798e-40e4-9c4d-b6902674b423": {
        "type": "Array",
        "defaultValue": [],
        "metadata": {
          "displayName": "Image exclusions",
          "description": "The list of InitContainers and Containers to exclude from policy evaluation. The identifier is the image of container. Prefix-matching can be signified with `*`. For example: `myregistry.azurecr.io/istio:*`. It is recommended that users use the fully-qualified Docker image name (e.g. start with a domain name) in order to avoid unexpectedly exempting images from an untrusted repository.",
          "portalReview": true
        }
      },
      "excludedNamespaces-423dd1ba-798e-40e4-9c4d-b6902674b423": {
        "type": "Array",
        "defaultValue": [
          "kube-system",
          "gatekeeper-system",
          "azure-arc",
          "azure-extensions-usage-system"
        ],
        "metadata": {
          "displayName": "Namespace exclusions",
          "description": "List of Kubernetes namespaces to exclude from policy evaluation. System namespaces \"kube-system\", \"gatekeeper-system\" and \"azure-arc\" are always excluded by design. \"azure-extensions-usage-system\" is optional to remove."
        }
      },
      "namespaces-423dd1ba-798e-40e4-9c4d-b6902674b423": {
        "type": "Array",
        "defaultValue": [],
        "metadata": {
          "displayName": "Namespace inclusions",
          "description": "List of Kubernetes namespaces to only include in policy evaluation. An empty list means the policy is applied to all resources in all namespaces."
        }
      },
      "labelSelector-423dd1ba-798e-40e4-9c4d-b6902674b423": {
        "type": "object",
        "defaultValue": {},
        "metadata": {
          "displayName": "Kubernetes label selector",
          "description": "Label query to select Kubernetes resources for policy evaluation. An empty label selector matches all Kubernetes resources."
        }
      },
      "effect-2158ddbe-fefa-408e-b43f-d4faef8ff3b8": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-797b37f7-06b8-444c-b1ad-fc62867f335a": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-22bee202-a82f-4305-9a2a-6d7f44d4dedb": {
        "type": "string",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-8c6a50c6-9ffd-4ae7-986f-5fa6111f9a54": {
        "type": "string",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "IncludeArcMachines-3d2a3320-2a72-4c67-ac5f-caa40fbee2b2": {
        "type": "string",
        "defaultValue": "false",
        "allowedValues": [
          "true",
          "false"
        ],
        "metadata": {
          "displayName": "Include Arc connected servers",
          "description": "By selecting this option, you agree to be charged monthly per Arc connected machine.",
          "portalReview": "true"
        }
      },
      "Members-3d2a3320-2a72-4c67-ac5f-caa40fbee2b2": {
        "type": "string",
        "defaultValue": "Administrator",
        "allowedValues": [],
        "metadata": {
          "displayName": "Members",
          "description": "A semicolon-separated list of all the expected members of the Administrators local group. Ex: Administrator; myUser1; myUser2"
        }
      },
      "IncludeArcMachines-bf16e0bb-31e1-4646-8202-60a235cc7e74": {
        "type": "string",
        "defaultValue": "false",
        "allowedValues": [
          "true",
          "false"
        ],
        "metadata": {
          "displayName": "Include Arc connected servers",
          "description": "By selecting this option, you agree to be charged monthly per Arc connected machine.",
          "portalReview": "true"
        }
      },
      "effect-bf16e0bb-31e1-4646-8202-60a235cc7e74": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-8dfab9c4-fe7b-49ad-85e4-1e9be085358f": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "allowedEncryptionSets-d461a302-a187-421a-89ac-84acdb4edc04": {
        "type": "Array",
        "metadata": {
          "displayName": "Allowed disk encryption set",
          "description": "The list of allowed disk encryption sets for managed disks.",
          "strongType": "Microsoft.Compute/diskEncryptionSets"
        }
      },
      "effect-d461a302-a187-421a-89ac-84acdb4edc04": {
        "type": "string",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-3bc8a0d5-38e0-4a3d-a657-2cb64468fc34": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "source-1c6e92c9-99f0-4e55-9cf2-0c234dc48f99": {
        "type": "String",
        "defaultValue": "Original",
        "allowedValues": [
          "All",
          "Generated",
          "Original"
        ],
        "metadata": {
          "displayName": "Source",
          "description": "The source k8s object for constraint evaluation. 'Original' means only evaluate against the specific GroupVersionKind specified in the policy definition. 'Generated' means only evaluate against k8s objects generated by Gatekeeper ExpansionTemplates. 'All' means evaluate against both the original object and any generated ones."
        }
      },
      "warn-1c6e92c9-99f0-4e55-9cf2-0c234dc48f99": {
        "type": "Boolean",
        "defaultValue": false,
        "metadata": {
          "displayName": "Warn",
          "description": "Whether or not to return warnings back to the user in the kubectl cli"
        }
      },
      "effect-1c6e92c9-99f0-4e55-9cf2-0c234dc48f99": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "excludedNamespaces-1c6e92c9-99f0-4e55-9cf2-0c234dc48f99": {
        "type": "Array",
        "defaultValue": [
          "kube-system",
          "gatekeeper-system",
          "azure-arc",
          "azure-extensions-usage-system"
        ],
        "metadata": {
          "displayName": "Namespace exclusions",
          "description": "List of Kubernetes namespaces to exclude from policy evaluation. System namespaces \"kube-system\", \"gatekeeper-system\" and \"azure-arc\" are always excluded by design. \"azure-extensions-usage-system\" is optional to remove."
        }
      },
      "namespaces-1c6e92c9-99f0-4e55-9cf2-0c234dc48f99": {
        "type": "Array",
        "defaultValue": [],
        "metadata": {
          "displayName": "Namespace inclusions",
          "description": "List of Kubernetes namespaces to only include in policy evaluation. An empty list means the policy is applied to all resources in all namespaces."
        }
      },
      "labelSelector-1c6e92c9-99f0-4e55-9cf2-0c234dc48f99": {
        "type": "object",
        "defaultValue": {},
        "metadata": {
          "displayName": "Kubernetes label selector",
          "description": "Label query to select Kubernetes resources for policy evaluation. An empty label selector matches all Kubernetes resources."
        }
      },
      "excludedContainers-1c6e92c9-99f0-4e55-9cf2-0c234dc48f99": {
        "type": "Array",
        "defaultValue": [],
        "metadata": {
          "displayName": "Containers exclusions",
          "description": "The list of InitContainers and Containers to exclude from policy evaluation. The identify is the name of container. Use an empty list to apply this policy to all containers in all namespaces."
        }
      },
      "excludedImages-1c6e92c9-99f0-4e55-9cf2-0c234dc48f99": {
        "type": "Array",
        "defaultValue": [],
        "metadata": {
          "displayName": "Image exclusions",
          "description": "The list of InitContainers and Containers to exclude from policy evaluation. The identifier is the image of container. Prefix-matching can be signified with `*`. For example: `myregistry.azurecr.io/istio:*`. It is recommended that users use the fully-qualified Docker image name (e.g. start with a domain name) in order to avoid unexpectedly exempting images from an untrusted repository.",
          "portalReview": true
        }
      },
      "effect-f4826e5f-6a27-407c-ae3e-9582eb39891d": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-7803067c-7d34-46e3-8c79-0ca68fc4036d": {
        "type": "String",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-3d9f5e4c-9947-4579-9539-2a7695fbc187": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-009a0c92-f5b4-4776-9b66-4ed2b4775563": {
        "type": "String",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-2b9ad585-36bc-4615-b300-fd4435808332": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-2393d2cf-a342-44cd-a2e2-fe0188fd1234": {
        "type": "string",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-b8564268-eb4a-4337-89be-a19db070c59d": {
        "type": "String",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-e96a9a5f-07ca-471b-9bc5-6a0f33cbd68f": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-4fa4b6c0-31ca-4c0d-b10d-24b96f62a751": {
        "type": "string",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "IncludeArcMachines-4ceb8dc2-559c-478b-a15b-733fbf1e3738": {
        "type": "string",
        "defaultValue": "false",
        "allowedValues": [
          "true",
          "false"
        ],
        "metadata": {
          "displayName": "Include Arc connected servers",
          "description": "By selecting this option, you agree to be charged monthly per Arc connected machine.",
          "portalReview": "true"
        }
      },
      "MaximumPasswordAge-4ceb8dc2-559c-478b-a15b-733fbf1e3738": {
        "type": "string",
        "defaultValue": "70",
        "metadata": {
          "displayName": "Maximum password age",
          "description": "The Maximum password age setting determines the period of time (in days) that a password can be used before the system requires the user to change it.",
          "portalReview": "true"
        }
      },
      "effect-4ceb8dc2-559c-478b-a15b-733fbf1e3738": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-a1840de2-8088-4ea8-b153-b4c723e9cb01": {
        "type": "string",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-7fe3b40f-802b-4cdd-8bd4-fd799c948cc2": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-fa498b91-8a7e-4710-9578-da944c68d1fe": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-d6759c02-b87f-42b7-892e-71b3f471d782": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "IncludeArcMachines-e068b215-0026-4354-b347-8fb2766f73a2": {
        "type": "string",
        "defaultValue": "false",
        "allowedValues": [
          "true",
          "false"
        ],
        "metadata": {
          "displayName": "Include Arc connected servers",
          "description": "By selecting this option, you agree to be charged monthly per Arc connected machine.",
          "portalReview": "true"
        }
      },
      "UsersOrGroupsThatMayAccessThisComputerFromTheNetwork-e068b215-0026-4354-b347-8fb2766f73a2": {
        "type": "string",
        "defaultValue": "Administrators, Authenticated Users",
        "metadata": {
          "displayName": "Users or groups that may access this computer from the network",
          "description": "Specifies which remote users on the network are permitted to connect to the computer. This does not include Remote Desktop Connection."
        }
      },
      "UsersOrGroupsThatMayLogOnLocally-e068b215-0026-4354-b347-8fb2766f73a2": {
        "type": "string",
        "defaultValue": "Administrators",
        "metadata": {
          "displayName": "Users or groups that may log on locally",
          "description": "Specifies which users or groups can interactively log on to the computer. Users who attempt to log on via Remote Desktop Connection or IIS also require this user right."
        }
      },
      "UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices-e068b215-0026-4354-b347-8fb2766f73a2": {
        "type": "string",
        "defaultValue": "Administrators, Remote Desktop Users",
        "metadata": {
          "displayName": "Users or groups that may log on through Remote Desktop Services",
          "description": "Specifies which users or groups are permitted to log on as a Terminal Services client, Remote Desktop, or for Remote Assistance."
        }
      },
      "UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork-e068b215-0026-4354-b347-8fb2766f73a2": {
        "type": "string",
        "defaultValue": "Guests",
        "metadata": {
          "displayName": "Users and groups that are denied access to this computer from the network",
          "description": "Specifies which users or groups are explicitly prohibited from connecting to the computer across the network."
        }
      },
      "UsersOrGroupsThatMayManageAuditingAndSecurityLog-e068b215-0026-4354-b347-8fb2766f73a2": {
        "type": "string",
        "defaultValue": "Administrators",
        "metadata": {
          "displayName": "Users or groups that may manage auditing and security log",
          "description": "Specifies users and groups permitted to change the auditing options for files and directories and clear the Security log."
        }
      },
      "UsersOrGroupsThatMayBackUpFilesAndDirectories-e068b215-0026-4354-b347-8fb2766f73a2": {
        "type": "string",
        "defaultValue": "Administrators, Backup Operators",
        "metadata": {
          "displayName": "Users or groups that may back up files and directories",
          "description": "Specifies users and groups allowed to circumvent file and directory permissions to back up the system."
        }
      },
      "UsersOrGroupsThatMayChangeTheSystemTime-e068b215-0026-4354-b347-8fb2766f73a2": {
        "type": "string",
        "defaultValue": "Administrators, LOCAL SERVICE",
        "metadata": {
          "displayName": "Users or groups that may change the system time",
          "description": "Specifies which users and groups are permitted to change the time and date on the internal clock of the computer."
        }
      },
      "UsersOrGroupsThatMayChangeTheTimeZone-e068b215-0026-4354-b347-8fb2766f73a2": {
        "type": "string",
        "defaultValue": "Administrators, LOCAL SERVICE",
        "metadata": {
          "displayName": "Users or groups that may change the time zone",
          "description": "Specifies which users and groups are permitted to change the time zone of the computer."
        }
      },
      "UsersOrGroupsThatMayCreateATokenObject-e068b215-0026-4354-b347-8fb2766f73a2": {
        "type": "string",
        "defaultValue": "No One",
        "metadata": {
          "displayName": "Users or groups that may create a token object",
          "description": "Specifies which users and groups are permitted to create an access token, which may provide elevated rights to access sensitive data."
        }
      },
      "UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob-e068b215-0026-4354-b347-8fb2766f73a2": {
        "type": "string",
        "defaultValue": "Guests",
        "metadata": {
          "displayName": "Users and groups that are denied logging on as a batch job",
          "description": "Specifies which users and groups are explicitly not permitted to log on to the computer as a batch job (i.e. scheduled task)."
        }
      },
      "UsersAndGroupsThatAreDeniedLoggingOnAsAService-e068b215-0026-4354-b347-8fb2766f73a2": {
        "type": "string",
        "defaultValue": "Guests",
        "metadata": {
          "displayName": "Users and groups that are denied logging on as a service",
          "description": "Specifies which service accounts are explicitly not permitted to register a process as a service."
        }
      },
      "UsersAndGroupsThatAreDeniedLocalLogon-e068b215-0026-4354-b347-8fb2766f73a2": {
        "type": "string",
        "defaultValue": "Guests",
        "metadata": {
          "displayName": "Users and groups that are denied local logon",
          "description": "Specifies which users and groups are explicitly not permitted to log on to the computer."
        }
      },
      "UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices-e068b215-0026-4354-b347-8fb2766f73a2": {
        "type": "string",
        "defaultValue": "Guests",
        "metadata": {
          "displayName": "Users and groups that are denied log on through Remote Desktop Services",
          "description": "Specifies which users and groups are explicitly not permitted to log on to the computer via Terminal Services/Remote Desktop Client."
        }
      },
      "UserAndGroupsThatMayForceShutdownFromARemoteSystem-e068b215-0026-4354-b347-8fb2766f73a2": {
        "type": "string",
        "defaultValue": "Administrators",
        "metadata": {
          "displayName": "User and groups that may force shutdown from a remote system",
          "description": "Specifies which users and groups are permitted to shut down the computer from a remote location on the network."
        }
      },
      "UsersAndGroupsThatMayRestoreFilesAndDirectories-e068b215-0026-4354-b347-8fb2766f73a2": {
        "type": "string",
        "defaultValue": "Administrators, Backup Operators",
        "metadata": {
          "displayName": "Users and groups that may restore files and directories",
          "description": "Specifies which users and groups are permitted to bypass file, directory, registry, and other persistent object permissions when restoring backed up files and directories."
        }
      },
      "UsersAndGroupsThatMayShutDownTheSystem-e068b215-0026-4354-b347-8fb2766f73a2": {
        "type": "string",
        "defaultValue": "Administrators",
        "metadata": {
          "displayName": "Users and groups that may shut down the system",
          "description": "Specifies which users and groups who are logged on locally to the computers in your environment are permitted to shut down the operating system with the Shut Down command."
        }
      },
      "UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects-e068b215-0026-4354-b347-8fb2766f73a2": {
        "type": "string",
        "defaultValue": "Administrators",
        "metadata": {
          "displayName": "Users or groups that may take ownership of files or other objects",
          "description": "Specifies which users and groups are permitted to take ownership of files, folders, registry keys, processes, or threads. This user right bypasses any permissions that are in place to protect objects to give ownership to the specified user."
        }
      },
      "effect-e068b215-0026-4354-b347-8fb2766f73a2": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-5e1de0e3-42cb-4ebc-a86d-61d0c619ca48": {
        "type": "string",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-d26f7642-7545-4e18-9b75-8c9bbdee3a9a": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-97566dd7-78ae-4997-8b36-1c7bfe0d8121": {
        "type": "string",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-d416745a-506c-48b6-8ab1-83cb814bcaa3": {
        "type": "string",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "virtualNetworkId-d416745a-506c-48b6-8ab1-83cb814bcaa3": {
        "type": "string",
        "metadata": {
          "displayName": "Virtual network Id",
          "description": "Resource Id of the virtual network. Example: /subscriptions/YourSubscriptionId/resourceGroups/YourResourceGroupName/providers/Microsoft.Network/virtualNetworks/Name"
        }
      },
      "effect-6581d072-105e-4418-827f-bd446d56421b": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-c9d007d0-c057-4772-b18c-01e546713bcd": {
        "type": "string",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "IncludeArcMachines-492a29ed-d143-4f03-b6a4-705ce081b463": {
        "type": "string",
        "defaultValue": "false",
        "allowedValues": [
          "true",
          "false"
        ],
        "metadata": {
          "displayName": "Include Arc connected servers",
          "description": "By selecting this option, you agree to be charged monthly per Arc connected machine.",
          "portalReview": "true"
        }
      },
      "UACAdminApprovalModeForTheBuiltinAdministratorAccount-492a29ed-d143-4f03-b6a4-705ce081b463": {
        "type": "string",
        "defaultValue": "1",
        "metadata": {
          "displayName": "UAC: Admin Approval Mode for the Built-in Administrator account",
          "description": "Specifies the behavior of Admin Approval Mode for the built-in Administrator account."
        }
      },
      "UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode-492a29ed-d143-4f03-b6a4-705ce081b463": {
        "type": "string",
        "defaultValue": "2",
        "metadata": {
          "displayName": "UAC: Behavior of the elevation prompt for administrators in Admin Approval Mode",
          "description": "Specifies the behavior of the elevation prompt for administrators."
        }
      },
      "UACDetectApplicationInstallationsAndPromptForElevation-492a29ed-d143-4f03-b6a4-705ce081b463": {
        "type": "string",
        "defaultValue": "1",
        "metadata": {
          "displayName": "UAC: Detect application installations and prompt for elevation",
          "description": "Specifies the behavior of application installation detection for the computer."
        }
      },
      "UACRunAllAdministratorsInAdminApprovalMode-492a29ed-d143-4f03-b6a4-705ce081b463": {
        "type": "string",
        "defaultValue": "1",
        "metadata": {
          "displayName": "UAC: Run all administrators in Admin Approval Mode",
          "description": "Specifies the behavior of all User Account Control (UAC) policy settings for the computer."
        }
      },
      "effect-492a29ed-d143-4f03-b6a4-705ce081b463": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "IncludeArcMachines-35d9882c-993d-44e6-87d2-db66ce21b636": {
        "type": "string",
        "defaultValue": "false",
        "allowedValues": [
          "true",
          "false"
        ],
        "metadata": {
          "displayName": "Include Arc connected servers",
          "description": "By selecting this option, you agree to be charged monthly per Arc connected machine.",
          "portalReview": "true"
        }
      },
      "WindowsFirewallDomainUseProfileSettings-35d9882c-993d-44e6-87d2-db66ce21b636": {
        "type": "string",
        "defaultValue": "1",
        "metadata": {
          "displayName": "Windows Firewall (Domain): Use profile settings",
          "description": "Specifies whether Windows Firewall with Advanced Security uses the settings for the Domain profile to filter network traffic. If you select Off, Windows Firewall with Advanced Security will not use any of the firewall rules or connection security rules for this profile."
        }
      },
      "WindowsFirewallDomainBehaviorForOutboundConnections-35d9882c-993d-44e6-87d2-db66ce21b636": {
        "type": "string",
        "defaultValue": "0",
        "metadata": {
          "displayName": "Windows Firewall (Domain): Behavior for outbound connections",
          "description": "Specifies the behavior for outbound connections for the Domain profile that do not match an outbound firewall rule. The default value of 0 means to allow connections, and a value of 1 means to block connections."
        }
      },
      "WindowsFirewallDomainApplyLocalConnectionSecurityRules-35d9882c-993d-44e6-87d2-db66ce21b636": {
        "type": "string",
        "defaultValue": "1",
        "metadata": {
          "displayName": "Windows Firewall (Domain): Apply local connection security rules",
          "description": "Specifies whether local administrators are allowed to create connection security rules that apply together with connection security rules configured by Group Policy for the Domain profile."
        }
      },
      "WindowsFirewallDomainApplyLocalFirewallRules-35d9882c-993d-44e6-87d2-db66ce21b636": {
        "type": "string",
        "defaultValue": "1",
        "metadata": {
          "displayName": "Windows Firewall (Domain): Apply local firewall rules",
          "description": "Specifies whether local administrators are allowed to create local firewall rules that apply together with firewall rules configured by Group Policy for the Domain profile."
        }
      },
      "WindowsFirewallDomainDisplayNotifications-35d9882c-993d-44e6-87d2-db66ce21b636": {
        "type": "string",
        "defaultValue": "1",
        "metadata": {
          "displayName": "Windows Firewall (Domain): Display notifications",
          "description": "Specifies whether Windows Firewall with Advanced Security displays notifications to the user when a program is blocked from receiving inbound connections, for the Domain profile."
        }
      },
      "WindowsFirewallPrivateUseProfileSettings-35d9882c-993d-44e6-87d2-db66ce21b636": {
        "type": "string",
        "defaultValue": "1",
        "metadata": {
          "displayName": "Windows Firewall (Private): Use profile settings",
          "description": "Specifies whether Windows Firewall with Advanced Security uses the settings for the Private profile to filter network traffic. If you select Off, Windows Firewall with Advanced Security will not use any of the firewall rules or connection security rules for this profile."
        }
      },
      "WindowsFirewallPrivateBehaviorForOutboundConnections-35d9882c-993d-44e6-87d2-db66ce21b636": {
        "type": "string",
        "defaultValue": "0",
        "metadata": {
          "displayName": "Windows Firewall (Private): Behavior for outbound connections",
          "description": "Specifies the behavior for outbound connections for the Private profile that do not match an outbound firewall rule. The default value of 0 means to allow connections, and a value of 1 means to block connections."
        }
      },
      "WindowsFirewallPrivateApplyLocalConnectionSecurityRules-35d9882c-993d-44e6-87d2-db66ce21b636": {
        "type": "string",
        "defaultValue": "1",
        "metadata": {
          "displayName": "Windows Firewall (Private): Apply local connection security rules",
          "description": "Specifies whether local administrators are allowed to create connection security rules that apply together with connection security rules configured by Group Policy for the Private profile."
        }
      },
      "WindowsFirewallPrivateApplyLocalFirewallRules-35d9882c-993d-44e6-87d2-db66ce21b636": {
        "type": "string",
        "defaultValue": "1",
        "metadata": {
          "displayName": "Windows Firewall (Private): Apply local firewall rules",
          "description": "Specifies whether local administrators are allowed to create local firewall rules that apply together with firewall rules configured by Group Policy for the Private profile."
        }
      },
      "WindowsFirewallPrivateDisplayNotifications-35d9882c-993d-44e6-87d2-db66ce21b636": {
        "type": "string",
        "defaultValue": "1",
        "metadata": {
          "displayName": "Windows Firewall (Private): Display notifications",
          "description": "Specifies whether Windows Firewall with Advanced Security displays notifications to the user when a program is blocked from receiving inbound connections, for the Private profile."
        }
      },
      "WindowsFirewallPublicUseProfileSettings-35d9882c-993d-44e6-87d2-db66ce21b636": {
        "type": "string",
        "defaultValue": "1",
        "metadata": {
          "displayName": "Windows Firewall (Public): Use profile settings",
          "description": "Specifies whether Windows Firewall with Advanced Security uses the settings for the Public profile to filter network traffic. If you select Off, Windows Firewall with Advanced Security will not use any of the firewall rules or connection security rules for this profile."
        }
      },
      "WindowsFirewallPublicBehaviorForOutboundConnections-35d9882c-993d-44e6-87d2-db66ce21b636": {
        "type": "string",
        "defaultValue": "0",
        "metadata": {
          "displayName": "Windows Firewall (Public): Behavior for outbound connections",
          "description": "Specifies the behavior for outbound connections for the Public profile that do not match an outbound firewall rule. The default value of 0 means to allow connections, and a value of 1 means to block connections."
        }
      },
      "WindowsFirewallPublicApplyLocalConnectionSecurityRules-35d9882c-993d-44e6-87d2-db66ce21b636": {
        "type": "string",
        "defaultValue": "1",
        "metadata": {
          "displayName": "Windows Firewall (Public): Apply local connection security rules",
          "description": "Specifies whether local administrators are allowed to create connection security rules that apply together with connection security rules configured by Group Policy for the Public profile."
        }
      },
      "WindowsFirewallPublicApplyLocalFirewallRules-35d9882c-993d-44e6-87d2-db66ce21b636": {
        "type": "string",
        "defaultValue": "1",
        "metadata": {
          "displayName": "Windows Firewall (Public): Apply local firewall rules",
          "description": "Specifies whether local administrators are allowed to create local firewall rules that apply together with firewall rules configured by Group Policy for the Public profile."
        }
      },
      "WindowsFirewallPublicDisplayNotifications-35d9882c-993d-44e6-87d2-db66ce21b636": {
        "type": "string",
        "defaultValue": "1",
        "metadata": {
          "displayName": "Windows Firewall (Public): Display notifications",
          "description": "Specifies whether Windows Firewall with Advanced Security displays notifications to the user when a program is blocked from receiving inbound connections, for the Public profile."
        }
      },
      "WindowsFirewallDomainAllowUnicastResponse-35d9882c-993d-44e6-87d2-db66ce21b636": {
        "type": "string",
        "defaultValue": "0",
        "metadata": {
          "displayName": "Windows Firewall: Domain: Allow unicast response",
          "description": "Specifies whether Windows Firewall with Advanced Security permits the local computer to receive unicast responses to its outgoing multicast or broadcast messages; for the Domain profile."
        }
      },
      "WindowsFirewallPrivateAllowUnicastResponse-35d9882c-993d-44e6-87d2-db66ce21b636": {
        "type": "string",
        "defaultValue": "0",
        "metadata": {
          "displayName": "Windows Firewall: Private: Allow unicast response",
          "description": "Specifies whether Windows Firewall with Advanced Security permits the local computer to receive unicast responses to its outgoing multicast or broadcast messages; for the Private profile."
        }
      },
      "WindowsFirewallPublicAllowUnicastResponse-35d9882c-993d-44e6-87d2-db66ce21b636": {
        "type": "string",
        "defaultValue": "1",
        "metadata": {
          "displayName": "Windows Firewall: Public: Allow unicast response",
          "description": "Specifies whether Windows Firewall with Advanced Security permits the local computer to receive unicast responses to its outgoing multicast or broadcast messages; for the Public profile."
        }
      },
      "effect-35d9882c-993d-44e6-87d2-db66ce21b636": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-c9299215-ae47-4f50-9c54-8a392f68a052": {
        "type": "string",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-60d21c4f-21a3-4d94-85f4-b924e6aeeda4": {
        "type": "string",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-11e3da8c-1d68-4392-badd-0ff3c43ab5b0": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-7698e800-9299-47a6-b3b6-5a0fee576eed": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-0820b7b9-23aa-4725-a1ce-ae4558f718e5": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "source-47a1ee2f-2a2a-4576-bf2a-e0e36709c2b8": {
        "type": "String",
        "defaultValue": "Original",
        "allowedValues": [
          "All",
          "Generated",
          "Original"
        ],
        "metadata": {
          "displayName": "Source",
          "description": "The source k8s object for constraint evaluation. 'Original' means only evaluate against the specific GroupVersionKind specified in the policy definition. 'Generated' means only evaluate against k8s objects generated by Gatekeeper ExpansionTemplates. 'All' means evaluate against both the original object and any generated ones."
        }
      },
      "warn-47a1ee2f-2a2a-4576-bf2a-e0e36709c2b8": {
        "type": "Boolean",
        "defaultValue": false,
        "metadata": {
          "displayName": "Warn",
          "description": "Whether or not to return warnings back to the user in the kubectl cli"
        }
      },
      "effect-47a1ee2f-2a2a-4576-bf2a-e0e36709c2b8": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "excludedNamespaces-47a1ee2f-2a2a-4576-bf2a-e0e36709c2b8": {
        "type": "Array",
        "defaultValue": [
          "kube-system",
          "gatekeeper-system",
          "azure-arc",
          "azure-extensions-usage-system"
        ],
        "metadata": {
          "displayName": "Namespace exclusions",
          "description": "List of Kubernetes namespaces to exclude from policy evaluation. System namespaces \"kube-system\", \"gatekeeper-system\" and \"azure-arc\" are always excluded by design. \"azure-extensions-usage-system\" is optional to remove."
        }
      },
      "namespaces-47a1ee2f-2a2a-4576-bf2a-e0e36709c2b8": {
        "type": "Array",
        "defaultValue": [],
        "metadata": {
          "displayName": "Namespace inclusions",
          "description": "List of Kubernetes namespaces to only include in policy evaluation. An empty list means the policy is applied to all resources in all namespaces."
        }
      },
      "labelSelector-47a1ee2f-2a2a-4576-bf2a-e0e36709c2b8": {
        "type": "object",
        "defaultValue": {},
        "metadata": {
          "displayName": "Kubernetes label selector",
          "description": "Label query to select Kubernetes resources for policy evaluation. An empty label selector matches all Kubernetes resources."
        }
      },
      "excludedImages-47a1ee2f-2a2a-4576-bf2a-e0e36709c2b8": {
        "type": "Array",
        "defaultValue": [],
        "metadata": {
          "displayName": "Image exclusions",
          "description": "The list of InitContainers and Containers to exclude from policy evaluation. The identifier is the image of container. Prefix-matching can be signified with `*`. For example: `myregistry.azurecr.io/istio:*`. It is recommended that users use the fully-qualified Docker image name (e.g. start with a domain name) in order to avoid unexpectedly exempting images from an untrusted repository.",
          "portalReview": true
        }
      },
      "effect-c5447c04-a4d7-4ba8-a263-c9ee321a6858": {
        "type": "String",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "operationName-c5447c04-a4d7-4ba8-a263-c9ee321a6858": {
        "type": "String",
        "allowedValues": [
          "Microsoft.Authorization/policyAssignments/write",
          "Microsoft.Authorization/policyAssignments/delete"
        ],
        "metadata": {
          "displayName": "Operation Name",
          "description": "Policy Operation name for which activity log alert should exist"
        }
      },
      "effect-146412e9-005c-472b-9e48-c87b72ac229e": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "IncludeArcMachines-72650e9f-97bc-4b2a-ab5f-9781a9fcecbc": {
        "type": "string",
        "defaultValue": "false",
        "allowedValues": [
          "true",
          "false"
        ],
        "metadata": {
          "displayName": "Include Arc connected servers",
          "description": "By selecting this option, you agree to be charged monthly per Arc connected machine.",
          "portalReview": "true"
        }
      },
      "effect-72650e9f-97bc-4b2a-ab5f-9781a9fcecbc": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-32e6bbec-16b6-44c2-be37-c5b672d103cf": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Disabled",
          "Deny"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-8ac833bd-f505-48d5-887e-c993a1d3eea0": {
        "type": "String",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-e15effd4-2278-4c65-a0da-4d6f6d1890e2": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Deny",
          "Audit",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-12d4fa5e-1f9f-4c21-97a9-b99b3c6611b5": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-a8793640-60f7-487c-b5c3-1d37215905c4": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-9b597639-28e4-48eb-b506-56b05d366257": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-438c38d2-3772-465a-a9cc-7a6666a275ce": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-95bccee9-a7f8-4bec-9ee9-62c3473701fc": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-fdccbe47-f3e3-4213-ad5d-ea459b2fa077": {
        "type": "string",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-d31e5c31-63b2-4f12-887b-e49456834fa1": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-0e6763cc-5078-4e64-889d-ff4d9a839047": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-b4dec045-250a-48c2-b5cc-e0c4eec8b5b4": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-b52376f7-9612-48a1-81cd-1ffe4b61032c": {
        "type": "string",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-12430be1-6cc8-4527-a9a8-e3d38f250096": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "modeRequirement-12430be1-6cc8-4527-a9a8-e3d38f250096": {
        "type": "String",
        "defaultValue": "Detection",
        "allowedValues": [
          "Prevention",
          "Detection"
        ],
        "metadata": {
          "displayName": "Mode Requirement",
          "description": "Mode required for all WAF policies"
        }
      },
      "effect-0a9fbe0d-c5c4-4da8-87d8-f4fd77338835": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-22730e10-96f6-4aac-ad84-9383d35b5917": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-ea4d6841-2173-4317-9747-ff522a45120f": {
        "type": "string",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-d38668f5-d155-42c7-ab3d-9b57b50f8fbf": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-abda6d70-9778-44e7-84a8-06713e6db027": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-0564d078-92f5-4f97-8398-b9f58a51f70b": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-0a1302fb-a631-4106-9753-f3d494733990": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-b954148f-4c11-4c38-8221-be76711e194a": {
        "type": "String",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "operationName-b954148f-4c11-4c38-8221-be76711e194a": {
        "type": "String",
        "allowedValues": [
          "Microsoft.Sql/servers/firewallRules/write",
          "Microsoft.Sql/servers/firewallRules/delete",
          "Microsoft.Network/networkSecurityGroups/write",
          "Microsoft.Network/networkSecurityGroups/delete",
          "Microsoft.ClassicNetwork/networkSecurityGroups/write",
          "Microsoft.ClassicNetwork/networkSecurityGroups/delete",
          "Microsoft.Network/networkSecurityGroups/securityRules/write",
          "Microsoft.Network/networkSecurityGroups/securityRules/delete",
          "Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write",
          "Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/delete"
        ],
        "metadata": {
          "displayName": "Operation Name",
          "description": "Administrative Operation name for which activity log alert should be configured"
        }
      },
      "IncludeArcMachines-3ff60f98-7fa4-410a-9f7f-0b00f5afdbdd": {
        "type": "string",
        "defaultValue": "false",
        "allowedValues": [
          "true",
          "false"
        ],
        "metadata": {
          "displayName": "Include Arc connected servers",
          "description": "By selecting this option, you agree to be charged monthly per Arc connected machine.",
          "portalReview": "true"
        }
      },
      "NetworkAccessRemotelyAccessibleRegistryPaths-3ff60f98-7fa4-410a-9f7f-0b00f5afdbdd": {
        "type": "string",
        "defaultValue": "System\\CurrentControlSet\\Control\\ProductOptions|#|System\\CurrentControlSet\\Control\\Server Applications|#|Software\\Microsoft\\Windows NT\\CurrentVersion",
        "metadata": {
          "displayName": "Network access: Remotely accessible registry paths",
          "description": "Specifies which registry paths will be accessible over the network, regardless of the users or groups listed in the access control list (ACL) of the `winreg` registry key."
        }
      },
      "NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths-3ff60f98-7fa4-410a-9f7f-0b00f5afdbdd": {
        "type": "string",
        "defaultValue": "System\\CurrentControlSet\\Control\\Print\\Printers|#|System\\CurrentControlSet\\Services\\Eventlog|#|Software\\Microsoft\\OLAP Server|#|Software\\Microsoft\\Windows NT\\CurrentVersion\\Print|#|Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows|#|System\\CurrentControlSet\\Control\\ContentIndex|#|System\\CurrentControlSet\\Control\\Terminal Server|#|System\\CurrentControlSet\\Control\\Terminal Server\\UserConfig|#|System\\CurrentControlSet\\Control\\Terminal Server\\DefaultUserConfiguration|#|Software\\Microsoft\\Windows NT\\CurrentVersion\\Perflib|#|System\\CurrentControlSet\\Services\\SysmonLog",
        "metadata": {
          "displayName": "Network access: Remotely accessible registry paths and sub-paths",
          "description": "Specifies which registry paths and sub-paths will be accessible over the network, regardless of the users or groups listed in the access control list (ACL) of the `winreg` registry key."
        }
      },
      "NetworkAccessSharesThatCanBeAccessedAnonymously-3ff60f98-7fa4-410a-9f7f-0b00f5afdbdd": {
        "type": "string",
        "defaultValue": "0",
        "metadata": {
          "displayName": "Network access: Shares that can be accessed anonymously",
          "description": "Specifies which network shares can be accessed by anonymous users. The default configuration for this policy setting has little effect because all users have to be authenticated before they can access shared resources on the server."
        }
      },
      "effect-3ff60f98-7fa4-410a-9f7f-0b00f5afdbdd": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-0fea8f8a-4169-495d-8307-30ec335f387d": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-d9844e8a-1437-4aeb-a32c-0c992f056095": {
        "type": "string",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "IncludeArcMachines-ee984370-154a-4ee8-9726-19d900e56fc0": {
        "type": "string",
        "defaultValue": "false",
        "allowedValues": [
          "true",
          "false"
        ],
        "metadata": {
          "displayName": "Include Arc connected servers",
          "description": "By selecting this option, you agree to be charged monthly per Arc connected machine.",
          "portalReview": "true"
        }
      },
      "AccountsGuestAccountStatus-ee984370-154a-4ee8-9726-19d900e56fc0": {
        "type": "string",
        "defaultValue": "0",
        "metadata": {
          "displayName": "Accounts: Guest account status",
          "description": "Specifies whether the local Guest account is disabled."
        }
      },
      "effect-ee984370-154a-4ee8-9726-19d900e56fc0": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-78215662-041e-49ed-a9dd-5385911b3a1f": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-df73bd95-24da-4a4f-96b9-4e8b94b402bd": {
        "type": "String",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "endpointType-df73bd95-24da-4a4f-96b9-4e8b94b402bd": {
        "type": "String",
        "defaultValue": "Management",
        "allowedValues": [
          "Management",
          "Git",
          "Gateway Configuration"
        ],
        "metadata": {
          "displayName": "Public Endpoint Type",
          "description": "Public Endpoint Type for which to enforce the access check"
        }
      },
      "effect-1c988dd6-ade4-430f-a608-2a3e5b0a6d38": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-e71308d3-144b-4262-b144-efdc3cc90517": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "IncludeArcMachines-30f71ea1-ac77-4f26-9fc5-2d926bbd4ba7": {
        "type": "string",
        "defaultValue": "false",
        "allowedValues": [
          "true",
          "false"
        ],
        "metadata": {
          "displayName": "Include Arc connected servers",
          "description": "By selecting this option, you agree to be charged monthly per Arc connected machine.",
          "portalReview": "true"
        }
      },
      "MembersToInclude-30f71ea1-ac77-4f26-9fc5-2d926bbd4ba7": {
        "type": "string",
        "metadata": {
          "displayName": "Members to include",
          "description": "A semicolon-separated list of members that should be included in the Administrators local group. Ex: Administrator; myUser1; myUser2"
        }
      },
      "effect-5d4e3c65-4873-47be-94f3-6f8b953a3598": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-564feb30-bf6a-4854-b4bb-0d2d2d1e6c66": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "source-098fc59e-46c7-4d99-9b16-64990e543d75": {
        "type": "String",
        "defaultValue": "Original",
        "allowedValues": [
          "All",
          "Generated",
          "Original"
        ],
        "metadata": {
          "displayName": "Source",
          "description": "The source k8s object for constraint evaluation. 'Original' means only evaluate against the specific GroupVersionKind specified in the policy definition. 'Generated' means only evaluate against k8s objects generated by Gatekeeper ExpansionTemplates. 'All' means evaluate against both the original object and any generated ones."
        }
      },
      "warn-098fc59e-46c7-4d99-9b16-64990e543d75": {
        "type": "Boolean",
        "defaultValue": false,
        "metadata": {
          "displayName": "Warn",
          "description": "Whether or not to return warnings back to the user in the kubectl cli"
        }
      },
      "effect-098fc59e-46c7-4d99-9b16-64990e543d75": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "excludedNamespaces-098fc59e-46c7-4d99-9b16-64990e543d75": {
        "type": "Array",
        "defaultValue": [
          "kube-system",
          "gatekeeper-system",
          "azure-arc",
          "azure-extensions-usage-system"
        ],
        "metadata": {
          "displayName": "Namespace exclusions",
          "description": "List of Kubernetes namespaces to exclude from policy evaluation. System namespaces \"kube-system\", \"gatekeeper-system\" and \"azure-arc\" are always excluded by design. \"azure-extensions-usage-system\" is optional to remove."
        }
      },
      "namespaces-098fc59e-46c7-4d99-9b16-64990e543d75": {
        "type": "Array",
        "defaultValue": [],
        "metadata": {
          "displayName": "Namespace inclusions",
          "description": "List of Kubernetes namespaces to only include in policy evaluation. An empty list means the policy is applied to all resources in all namespaces."
        }
      },
      "labelSelector-098fc59e-46c7-4d99-9b16-64990e543d75": {
        "type": "object",
        "defaultValue": {},
        "metadata": {
          "displayName": "Kubernetes label selector",
          "description": "Label query to select Kubernetes resources for policy evaluation. An empty label selector matches all Kubernetes resources."
        }
      },
      "allowedHostPaths-098fc59e-46c7-4d99-9b16-64990e543d75": {
        "type": "Object",
        "defaultValue": {
          "paths": []
        },
        "metadata": {
          "displayName": "Allowed host paths",
          "description": "The host paths allowed for pod hostPath volumes to use. Provide an empty paths list to block all host paths.",
          "portalReview": true
        }
      },
      "excludedContainers-098fc59e-46c7-4d99-9b16-64990e543d75": {
        "type": "Array",
        "defaultValue": [],
        "metadata": {
          "displayName": "Containers exclusions",
          "description": "The list of InitContainers and Containers to exclude from readonly evaluation. It will not exclude the disallowed host path. The identify is the name of container. Use an empty list to apply this policy to all containers in all namespaces."
        }
      },
      "excludedImages-098fc59e-46c7-4d99-9b16-64990e543d75": {
        "type": "Array",
        "defaultValue": [],
        "metadata": {
          "displayName": "Image exclusions",
          "description": "The list of InitContainers and Containers to exclude from policy evaluation. The identifier is the image of container. Prefix-matching can be signified with `*`. For example: `myregistry.azurecr.io/istio:*`. It is recommended that users use the fully-qualified Docker image name (e.g. start with a domain name) in order to avoid unexpectedly exempting images from an untrusted repository.",
          "portalReview": true
        }
      },
      "effect-c3d20c29-b36d-48fe-808b-99a87530ad99": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-6c53d030-cc64-46f0-906d-2bc061cd1334": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-8405fdab-1faf-48aa-b702-999c9c172094": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-21a6bc25-125e-4d13-b82d-2e19b7208ab7": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-1bc02227-0cb6-4e11-8f53-eb0b22eab7e8": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "maximumValidityInMonths-0a075868-4c26-42ef-914c-5bc007359560": {
        "type": "Integer",
        "defaultValue": 12,
        "metadata": {
          "displayName": "The maximum validity in months",
          "description": "The limit to how long a certificate may be valid for. Certificates with lengthy validity periods aren't best practice."
        }
      },
      "effect-0a075868-4c26-42ef-914c-5bc007359560": {
        "type": "string",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-deeddb44-9f94-4903-9fa0-081d524406e3": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-abfb7388-5bf4-4ad7-ba99-2cd2f41cebb9": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "source-9f061a12-e40d-4183-a00e-171812443373": {
        "type": "String",
        "defaultValue": "Original",
        "allowedValues": [
          "All",
          "Generated",
          "Original"
        ],
        "metadata": {
          "displayName": "Source",
          "description": "The source k8s object for constraint evaluation. 'Original' means only evaluate against the specific GroupVersionKind specified in the policy definition. 'Generated' means only evaluate against k8s objects generated by Gatekeeper ExpansionTemplates. 'All' means evaluate against both the original object and any generated ones."
        }
      },
      "warn-9f061a12-e40d-4183-a00e-171812443373": {
        "type": "Boolean",
        "defaultValue": false,
        "metadata": {
          "displayName": "Warn",
          "description": "Whether or not to return warnings back to the user in the kubectl cli"
        }
      },
      "effect-9f061a12-e40d-4183-a00e-171812443373": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "excludedNamespaces-9f061a12-e40d-4183-a00e-171812443373": {
        "type": "Array",
        "defaultValue": [
          "kube-system",
          "gatekeeper-system",
          "azure-arc",
          "azure-extensions-usage-system"
        ],
        "metadata": {
          "displayName": "Namespace exclusions",
          "description": "List of Kubernetes namespaces to exclude from policy evaluation. System namespaces \"kube-system\", \"gatekeeper-system\" and \"azure-arc\" are always excluded by design. \"azure-extensions-usage-system\" is optional to remove."
        }
      },
      "namespaces-9f061a12-e40d-4183-a00e-171812443373": {
        "type": "Array",
        "defaultValue": [
          "default"
        ],
        "metadata": {
          "displayName": "Namespace inclusions",
          "description": "List of Kubernetes namespaces to only include in policy evaluation. An empty list means the policy is applied to all resources in all namespaces."
        }
      },
      "labelSelector-9f061a12-e40d-4183-a00e-171812443373": {
        "type": "object",
        "defaultValue": {},
        "metadata": {
          "displayName": "Kubernetes label selector",
          "description": "Label query to select Kubernetes resources for policy evaluation. An empty label selector matches all Kubernetes resources."
        }
      }
    },
    "policyDefinitions": [
      {
        "policyDefinitionReferenceId": "f655e522-adff-494d-95c2-52d4f6d56a42",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f655e522-adff-494d-95c2-52d4f6d56a42",
        "definitionVersion": "3.*.*-preview",
        "groupNames": [
          "Cyber_Essentials_v3.1_4"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-f655e522-adff-494d-95c2-52d4f6d56a42')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "40e85574-ef33-47e8-a854-7a65c7500560",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/40e85574-ef33-47e8-a854-7a65c7500560",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_2",
          "Cyber_Essentials_v3.1_4"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-40e85574-ef33-47e8-a854-7a65c7500560')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "ea53dbee-c6c9-4f0e-9f9e-de0039b78023",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ea53dbee-c6c9-4f0e-9f9e-de0039b78023",
        "definitionVersion": "3.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_",
          "Cyber_Essentials_v3.1_4",
          "Cyber_Essentials_v3.1_2",
          "Cyber_Essentials_v3.1_5"
        ],
        "parameters": {
          "IncludeArcMachines": {
            "value": "[parameters('IncludeArcMachines-ea53dbee-c6c9-4f0e-9f9e-de0039b78023')]"
          },
          "effect": {
            "value": "[parameters('effect-ea53dbee-c6c9-4f0e-9f9e-de0039b78023')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "3b980d31-7904-4bb7-8575-5665739a8052",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3b980d31-7904-4bb7-8575-5665739a8052",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_2",
          "Cyber_Essentials_v3.1_4"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-3b980d31-7904-4bb7-8575-5665739a8052')]"
          },
          "operationName": {
            "value": "[parameters('operationName-3b980d31-7904-4bb7-8575-5665739a8052')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "a1817ec0-a368-432a-8057-8371e17ac6ee",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a1817ec0-a368-432a-8057-8371e17ac6ee",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_2",
          "Cyber_Essentials_v3.1_5",
          "Cyber_Essentials_v3.1_4"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-a1817ec0-a368-432a-8057-8371e17ac6ee')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "2913021d-f2fd-4f3d-b958-22354e2bdbcb",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2913021d-f2fd-4f3d-b958-22354e2bdbcb",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_3",
          "Cyber_Essentials_v3.1_5"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-2913021d-f2fd-4f3d-b958-22354e2bdbcb')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "0a15ec92-a229-4763-bb14-0ea34a568f8d",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0a15ec92-a229-4763-bb14-0ea34a568f8d",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_1",
          "Cyber_Essentials_v3.1_3",
          "Cyber_Essentials_v3.1_5"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-0a15ec92-a229-4763-bb14-0ea34a568f8d')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "0e60b895-3786-45da-8377-9c6b4b6ac5f9",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0e60b895-3786-45da-8377-9c6b4b6ac5f9",
        "definitionVersion": "2.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_1",
          "Cyber_Essentials_v3.1_3",
          "Cyber_Essentials_v3.1_5"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-0e60b895-3786-45da-8377-9c6b4b6ac5f9')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "055aa869-bc98-4af8-bafc-23f1ab6ffe2c",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/055aa869-bc98-4af8-bafc-23f1ab6ffe2c",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_4"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-055aa869-bc98-4af8-bafc-23f1ab6ffe2c')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "a1181c5f-672a-477a-979a-7d58aa086233",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a1181c5f-672a-477a-979a-7d58aa086233",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_3",
          "Cyber_Essentials_v3.1_5"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-a1181c5f-672a-477a-979a-7d58aa086233')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "501541f7-f7e7-4cd6-868c-4190fdad3ac9",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/501541f7-f7e7-4cd6-868c-4190fdad3ac9",
        "definitionVersion": "3.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_3",
          "Cyber_Essentials_v3.1_5"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-501541f7-f7e7-4cd6-868c-4190fdad3ac9')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "c26596ff-4d70-4e6a-9a30-c2506bd2f80c",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c26596ff-4d70-4e6a-9a30-c2506bd2f80c",
        "definitionVersion": "6.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_2",
          "Cyber_Essentials_v3.1_4",
          "Cyber_Essentials_v3.1_1",
          "Cyber_Essentials_v3.1_3",
          "Cyber_Essentials_v3.1_5"
        ],
        "parameters": {
          "source": {
            "value": "[parameters('source-c26596ff-4d70-4e6a-9a30-c2506bd2f80c')]"
          },
          "warn": {
            "value": "[parameters('warn-c26596ff-4d70-4e6a-9a30-c2506bd2f80c')]"
          },
          "effect": {
            "value": "[parameters('effect-c26596ff-4d70-4e6a-9a30-c2506bd2f80c')]"
          },
          "excludedNamespaces": {
            "value": "[parameters('excludedNamespaces-c26596ff-4d70-4e6a-9a30-c2506bd2f80c')]"
          },
          "namespaces": {
            "value": "[parameters('namespaces-c26596ff-4d70-4e6a-9a30-c2506bd2f80c')]"
          },
          "labelSelector": {
            "value": "[parameters('labelSelector-c26596ff-4d70-4e6a-9a30-c2506bd2f80c')]"
          },
          "allowedCapabilities": {
            "value": "[parameters('allowedCapabilities-c26596ff-4d70-4e6a-9a30-c2506bd2f80c')]"
          },
          "requiredDropCapabilities": {
            "value": "[parameters('requiredDropCapabilities-c26596ff-4d70-4e6a-9a30-c2506bd2f80c')]"
          },
          "excludedContainers": {
            "value": "[parameters('excludedContainers-c26596ff-4d70-4e6a-9a30-c2506bd2f80c')]"
          },
          "excludedImages": {
            "value": "[parameters('excludedImages-c26596ff-4d70-4e6a-9a30-c2506bd2f80c')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "98728c90-32c7-4049-8429-847dc0f4fe37",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/98728c90-32c7-4049-8429-847dc0f4fe37",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_4"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-98728c90-32c7-4049-8429-847dc0f4fe37')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "5450f5bd-9c72-4390-a9c4-a7aba4edfdd2",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5450f5bd-9c72-4390-a9c4-a7aba4edfdd2",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_1",
          "Cyber_Essentials_v3.1_4",
          "Cyber_Essentials_v3.1_2"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-5450f5bd-9c72-4390-a9c4-a7aba4edfdd2')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "33936777-f2ac-45aa-82ec-07958ec9ade4",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/33936777-f2ac-45aa-82ec-07958ec9ade4",
        "definitionVersion": "3.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_2",
          "Cyber_Essentials_v3.1_4"
        ],
        "parameters": {
          "IncludeArcMachines": {
            "value": "[parameters('IncludeArcMachines-33936777-f2ac-45aa-82ec-07958ec9ade4')]"
          },
          "AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits": {
            "value": "[parameters('AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits-33936777-f2ac-45aa-82ec-07958ec9ade4')]"
          },
          "effect": {
            "value": "[parameters('effect-33936777-f2ac-45aa-82ec-07958ec9ade4')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "152b15f7-8e1f-4c1f-ab71-8c010ba5dbc0",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/152b15f7-8e1f-4c1f-ab71-8c010ba5dbc0",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_2",
          "Cyber_Essentials_v3.1_4"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-152b15f7-8e1f-4c1f-ab71-8c010ba5dbc0')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "1221c620-d201-468c-81e7-2817e6107e84",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1221c620-d201-468c-81e7-2817e6107e84",
        "definitionVersion": "3.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_1",
          "Cyber_Essentials_v3.1_4"
        ],
        "parameters": {
          "IncludeArcMachines": {
            "value": "[parameters('IncludeArcMachines-1221c620-d201-468c-81e7-2817e6107e84')]"
          },
          "NetworkSecurityConfigureEncryptionTypesAllowedForKerberos": {
            "value": "[parameters('NetworkSecurityConfigureEncryptionTypesAllowedForKerberos-1221c620-d201-468c-81e7-2817e6107e84')]"
          },
          "NetworkSecurityLANManagerAuthenticationLevel": {
            "value": "[parameters('NetworkSecurityLANManagerAuthenticationLevel-1221c620-d201-468c-81e7-2817e6107e84')]"
          },
          "NetworkSecurityLDAPClientSigningRequirements": {
            "value": "[parameters('NetworkSecurityLDAPClientSigningRequirements-1221c620-d201-468c-81e7-2817e6107e84')]"
          },
          "NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients": {
            "value": "[parameters('NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients-1221c620-d201-468c-81e7-2817e6107e84')]"
          },
          "NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers": {
            "value": "[parameters('NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers-1221c620-d201-468c-81e7-2817e6107e84')]"
          },
          "effect": {
            "value": "[parameters('effect-1221c620-d201-468c-81e7-2817e6107e84')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "87845465-c458-45f3-af66-dcd62176f397",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/87845465-c458-45f3-af66-dcd62176f397",
        "definitionVersion": "3.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_4",
          "Cyber_Essentials_v3.1_2",
          "Cyber_Essentials_v3.1_5"
        ],
        "parameters": {
          "IncludeArcMachines": {
            "value": "[parameters('IncludeArcMachines-87845465-c458-45f3-af66-dcd62176f397')]"
          },
          "effect": {
            "value": "[parameters('effect-87845465-c458-45f3-af66-dcd62176f397')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "e6955644-301c-44b5-a4c4-528577de6861",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e6955644-301c-44b5-a4c4-528577de6861",
        "definitionVersion": "3.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_3",
          "Cyber_Essentials_v3.1_5",
          "Cyber_Essentials_v3.1_1",
          "Cyber_Essentials_v3.1_4"
        ],
        "parameters": {
          "IncludeArcMachines": {
            "value": "[parameters('IncludeArcMachines-e6955644-301c-44b5-a4c4-528577de6861')]"
          },
          "effect": {
            "value": "[parameters('effect-e6955644-301c-44b5-a4c4-528577de6861')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "1b8ca024-1d5c-4dec-8995-b1a932b41780",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1b8ca024-1d5c-4dec-8995-b1a932b41780",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_2",
          "Cyber_Essentials_v3.1_5",
          "Cyber_Essentials_v3.1_4"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-1b8ca024-1d5c-4dec-8995-b1a932b41780')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "0da106f2-4ca3-48e8-bc85-c638fe6aea8f",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0da106f2-4ca3-48e8-bc85-c638fe6aea8f",
        "definitionVersion": "3.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_4"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-0da106f2-4ca3-48e8-bc85-c638fe6aea8f')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "331e8ea8-378a-410f-a2e5-ae22f38bb0da",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/331e8ea8-378a-410f-a2e5-ae22f38bb0da",
        "definitionVersion": "3.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_1",
          "Cyber_Essentials_v3.1_3",
          "Cyber_Essentials_v3.1_5"
        ]
      },
      {
        "policyDefinitionReferenceId": "df49d893-a74c-421d-bc95-c663042e5b80",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/df49d893-a74c-421d-bc95-c663042e5b80",
        "definitionVersion": "6.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_1",
          "Cyber_Essentials_v3.1_3",
          "Cyber_Essentials_v3.1_5"
        ],
        "parameters": {
          "source": {
            "value": "[parameters('source-df49d893-a74c-421d-bc95-c663042e5b80')]"
          },
          "warn": {
            "value": "[parameters('warn-df49d893-a74c-421d-bc95-c663042e5b80')]"
          },
          "effect": {
            "value": "[parameters('effect-df49d893-a74c-421d-bc95-c663042e5b80')]"
          },
          "excludedNamespaces": {
            "value": "[parameters('excludedNamespaces-df49d893-a74c-421d-bc95-c663042e5b80')]"
          },
          "namespaces": {
            "value": "[parameters('namespaces-df49d893-a74c-421d-bc95-c663042e5b80')]"
          },
          "labelSelector": {
            "value": "[parameters('labelSelector-df49d893-a74c-421d-bc95-c663042e5b80')]"
          },
          "excludedContainers": {
            "value": "[parameters('excludedContainers-df49d893-a74c-421d-bc95-c663042e5b80')]"
          },
          "excludedImages": {
            "value": "[parameters('excludedImages-df49d893-a74c-421d-bc95-c663042e5b80')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "69bf4abd-ca1e-4cf6-8b5a-762d42e61d4f",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/69bf4abd-ca1e-4cf6-8b5a-762d42e61d4f",
        "definitionVersion": "2.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_2",
          "Cyber_Essentials_v3.1_4"
        ],
        "parameters": {
          "IncludeArcMachines": {
            "value": "[parameters('IncludeArcMachines-69bf4abd-ca1e-4cf6-8b5a-762d42e61d4f')]"
          },
          "MembersToExclude": {
            "value": "[parameters('MembersToExclude-69bf4abd-ca1e-4cf6-8b5a-762d42e61d4f')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "423dd1ba-798e-40e4-9c4d-b6902674b423",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/423dd1ba-798e-40e4-9c4d-b6902674b423",
        "definitionVersion": "4.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_2",
          "Cyber_Essentials_v3.1_4"
        ],
        "parameters": {
          "source": {
            "value": "[parameters('source-423dd1ba-798e-40e4-9c4d-b6902674b423')]"
          },
          "warn": {
            "value": "[parameters('warn-423dd1ba-798e-40e4-9c4d-b6902674b423')]"
          },
          "effect": {
            "value": "[parameters('effect-423dd1ba-798e-40e4-9c4d-b6902674b423')]"
          },
          "excludedImages": {
            "value": "[parameters('excludedImages-423dd1ba-798e-40e4-9c4d-b6902674b423')]"
          },
          "excludedNamespaces": {
            "value": "[parameters('excludedNamespaces-423dd1ba-798e-40e4-9c4d-b6902674b423')]"
          },
          "namespaces": {
            "value": "[parameters('namespaces-423dd1ba-798e-40e4-9c4d-b6902674b423')]"
          },
          "labelSelector": {
            "value": "[parameters('labelSelector-423dd1ba-798e-40e4-9c4d-b6902674b423')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "2158ddbe-fefa-408e-b43f-d4faef8ff3b8",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2158ddbe-fefa-408e-b43f-d4faef8ff3b8",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_4"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-2158ddbe-fefa-408e-b43f-d4faef8ff3b8')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "797b37f7-06b8-444c-b1ad-fc62867f335a",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/797b37f7-06b8-444c-b1ad-fc62867f335a",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_2",
          "Cyber_Essentials_v3.1_5",
          "Cyber_Essentials_v3.1_4"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-797b37f7-06b8-444c-b1ad-fc62867f335a')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "22bee202-a82f-4305-9a2a-6d7f44d4dedb",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/22bee202-a82f-4305-9a2a-6d7f44d4dedb",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_4",
          "Cyber_Essentials_v3.1_1"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-22bee202-a82f-4305-9a2a-6d7f44d4dedb')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "8c6a50c6-9ffd-4ae7-986f-5fa6111f9a54",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8c6a50c6-9ffd-4ae7-986f-5fa6111f9a54",
        "definitionVersion": "2.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_2",
          "Cyber_Essentials_v3.1_4"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-8c6a50c6-9ffd-4ae7-986f-5fa6111f9a54')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "3d2a3320-2a72-4c67-ac5f-caa40fbee2b2",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3d2a3320-2a72-4c67-ac5f-caa40fbee2b2",
        "definitionVersion": "2.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_2",
          "Cyber_Essentials_v3.1_4"
        ],
        "parameters": {
          "IncludeArcMachines": {
            "value": "[parameters('IncludeArcMachines-3d2a3320-2a72-4c67-ac5f-caa40fbee2b2')]"
          },
          "Members": {
            "value": "[parameters('Members-3d2a3320-2a72-4c67-ac5f-caa40fbee2b2')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "bf16e0bb-31e1-4646-8202-60a235cc7e74",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/bf16e0bb-31e1-4646-8202-60a235cc7e74",
        "definitionVersion": "2.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_2",
          "Cyber_Essentials_v3.1_4"
        ],
        "parameters": {
          "IncludeArcMachines": {
            "value": "[parameters('IncludeArcMachines-bf16e0bb-31e1-4646-8202-60a235cc7e74')]"
          },
          "effect": {
            "value": "[parameters('effect-bf16e0bb-31e1-4646-8202-60a235cc7e74')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "8dfab9c4-fe7b-49ad-85e4-1e9be085358f",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8dfab9c4-fe7b-49ad-85e4-1e9be085358f",
        "definitionVersion": "6.*.*-preview",
        "groupNames": [
          "Cyber_Essentials_v3.1_2",
          "Cyber_Essentials_v3.1_4",
          "Cyber_Essentials_v3.1_3",
          "Cyber_Essentials_v3.1_5"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-8dfab9c4-fe7b-49ad-85e4-1e9be085358f')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9",
        "definitionVersion": "2.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_3",
          "Cyber_Essentials_v3.1_5"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "d461a302-a187-421a-89ac-84acdb4edc04",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d461a302-a187-421a-89ac-84acdb4edc04",
        "definitionVersion": "2.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_4"
        ],
        "parameters": {
          "allowedEncryptionSets": {
            "value": "[parameters('allowedEncryptionSets-d461a302-a187-421a-89ac-84acdb4edc04')]"
          },
          "effect": {
            "value": "[parameters('effect-d461a302-a187-421a-89ac-84acdb4edc04')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "3bc8a0d5-38e0-4a3d-a657-2cb64468fc34",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3bc8a0d5-38e0-4a3d-a657-2cb64468fc34",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_3",
          "Cyber_Essentials_v3.1_5"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-3bc8a0d5-38e0-4a3d-a657-2cb64468fc34')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "1c6e92c9-99f0-4e55-9cf2-0c234dc48f99",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1c6e92c9-99f0-4e55-9cf2-0c234dc48f99",
        "definitionVersion": "7.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_4",
          "Cyber_Essentials_v3.1_1",
          "Cyber_Essentials_v3.1_3",
          "Cyber_Essentials_v3.1_5"
        ],
        "parameters": {
          "source": {
            "value": "[parameters('source-1c6e92c9-99f0-4e55-9cf2-0c234dc48f99')]"
          },
          "warn": {
            "value": "[parameters('warn-1c6e92c9-99f0-4e55-9cf2-0c234dc48f99')]"
          },
          "effect": {
            "value": "[parameters('effect-1c6e92c9-99f0-4e55-9cf2-0c234dc48f99')]"
          },
          "excludedNamespaces": {
            "value": "[parameters('excludedNamespaces-1c6e92c9-99f0-4e55-9cf2-0c234dc48f99')]"
          },
          "namespaces": {
            "value": "[parameters('namespaces-1c6e92c9-99f0-4e55-9cf2-0c234dc48f99')]"
          },
          "labelSelector": {
            "value": "[parameters('labelSelector-1c6e92c9-99f0-4e55-9cf2-0c234dc48f99')]"
          },
          "excludedContainers": {
            "value": "[parameters('excludedContainers-1c6e92c9-99f0-4e55-9cf2-0c234dc48f99')]"
          },
          "excludedImages": {
            "value": "[parameters('excludedImages-1c6e92c9-99f0-4e55-9cf2-0c234dc48f99')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "f4826e5f-6a27-407c-ae3e-9582eb39891d",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f4826e5f-6a27-407c-ae3e-9582eb39891d",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_2",
          "Cyber_Essentials_v3.1_5",
          "Cyber_Essentials_v3.1_4"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-f4826e5f-6a27-407c-ae3e-9582eb39891d')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "7803067c-7d34-46e3-8c79-0ca68fc4036d",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7803067c-7d34-46e3-8c79-0ca68fc4036d",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_2",
          "Cyber_Essentials_v3.1_5",
          "Cyber_Essentials_v3.1_4"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-7803067c-7d34-46e3-8c79-0ca68fc4036d')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "3d9f5e4c-9947-4579-9539-2a7695fbc187",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3d9f5e4c-9947-4579-9539-2a7695fbc187",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_2",
          "Cyber_Essentials_v3.1_5",
          "Cyber_Essentials_v3.1_4"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-3d9f5e4c-9947-4579-9539-2a7695fbc187')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "009a0c92-f5b4-4776-9b66-4ed2b4775563",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/009a0c92-f5b4-4776-9b66-4ed2b4775563",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_2",
          "Cyber_Essentials_v3.1_5",
          "Cyber_Essentials_v3.1_4"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-009a0c92-f5b4-4776-9b66-4ed2b4775563')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "2b9ad585-36bc-4615-b300-fd4435808332",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2b9ad585-36bc-4615-b300-fd4435808332",
        "definitionVersion": "3.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_2",
          "Cyber_Essentials_v3.1_5"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-2b9ad585-36bc-4615-b300-fd4435808332')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "2393d2cf-a342-44cd-a2e2-fe0188fd1234",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2393d2cf-a342-44cd-a2e2-fe0188fd1234",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_2",
          "Cyber_Essentials_v3.1_5",
          "Cyber_Essentials_v3.1_4"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-2393d2cf-a342-44cd-a2e2-fe0188fd1234')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "b8564268-eb4a-4337-89be-a19db070c59d",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b8564268-eb4a-4337-89be-a19db070c59d",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_2",
          "Cyber_Essentials_v3.1_5",
          "Cyber_Essentials_v3.1_4"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-b8564268-eb4a-4337-89be-a19db070c59d')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "e96a9a5f-07ca-471b-9bc5-6a0f33cbd68f",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e96a9a5f-07ca-471b-9bc5-6a0f33cbd68f",
        "definitionVersion": "2.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_2",
          "Cyber_Essentials_v3.1_4"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-e96a9a5f-07ca-471b-9bc5-6a0f33cbd68f')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "4fa4b6c0-31ca-4c0d-b10d-24b96f62a751",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4fa4b6c0-31ca-4c0d-b10d-24b96f62a751",
        "definitionVersion": "3.*.*-preview",
        "groupNames": [
          "Cyber_Essentials_v3.1_2",
          "Cyber_Essentials_v3.1_5",
          "Cyber_Essentials_v3.1_4"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-4fa4b6c0-31ca-4c0d-b10d-24b96f62a751')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "4ceb8dc2-559c-478b-a15b-733fbf1e3738",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4ceb8dc2-559c-478b-a15b-733fbf1e3738",
        "definitionVersion": "2.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_2",
          "Cyber_Essentials_v3.1_4"
        ],
        "parameters": {
          "IncludeArcMachines": {
            "value": "[parameters('IncludeArcMachines-4ceb8dc2-559c-478b-a15b-733fbf1e3738')]"
          },
          "MaximumPasswordAge": {
            "value": "[parameters('MaximumPasswordAge-4ceb8dc2-559c-478b-a15b-733fbf1e3738')]"
          },
          "effect": {
            "value": "[parameters('effect-4ceb8dc2-559c-478b-a15b-733fbf1e3738')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "a1840de2-8088-4ea8-b153-b4c723e9cb01",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a1840de2-8088-4ea8-b153-b4c723e9cb01",
        "definitionVersion": "2.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_3",
          "Cyber_Essentials_v3.1_5"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-a1840de2-8088-4ea8-b153-b4c723e9cb01')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "7fe3b40f-802b-4cdd-8bd4-fd799c948cc2",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7fe3b40f-802b-4cdd-8bd4-fd799c948cc2",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_3",
          "Cyber_Essentials_v3.1_5"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-7fe3b40f-802b-4cdd-8bd4-fd799c948cc2')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "fa498b91-8a7e-4710-9578-da944c68d1fe",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/fa498b91-8a7e-4710-9578-da944c68d1fe",
        "definitionVersion": "1.*.*-preview",
        "groupNames": [
          "Cyber_Essentials_v3.1_1",
          "Cyber_Essentials_v3.1_4"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-fa498b91-8a7e-4710-9578-da944c68d1fe')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "d6759c02-b87f-42b7-892e-71b3f471d782",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d6759c02-b87f-42b7-892e-71b3f471d782",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_1",
          "Cyber_Essentials_v3.1_4"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-d6759c02-b87f-42b7-892e-71b3f471d782')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "e068b215-0026-4354-b347-8fb2766f73a2",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e068b215-0026-4354-b347-8fb2766f73a2",
        "definitionVersion": "3.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_2",
          "Cyber_Essentials_v3.1_4",
          "Cyber_Essentials_v3.1_5"
        ],
        "parameters": {
          "IncludeArcMachines": {
            "value": "[parameters('IncludeArcMachines-e068b215-0026-4354-b347-8fb2766f73a2')]"
          },
          "UsersOrGroupsThatMayAccessThisComputerFromTheNetwork": {
            "value": "[parameters('UsersOrGroupsThatMayAccessThisComputerFromTheNetwork-e068b215-0026-4354-b347-8fb2766f73a2')]"
          },
          "UsersOrGroupsThatMayLogOnLocally": {
            "value": "[parameters('UsersOrGroupsThatMayLogOnLocally-e068b215-0026-4354-b347-8fb2766f73a2')]"
          },
          "UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices": {
            "value": "[parameters('UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices-e068b215-0026-4354-b347-8fb2766f73a2')]"
          },
          "UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork": {
            "value": "[parameters('UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork-e068b215-0026-4354-b347-8fb2766f73a2')]"
          },
          "UsersOrGroupsThatMayManageAuditingAndSecurityLog": {
            "value": "[parameters('UsersOrGroupsThatMayManageAuditingAndSecurityLog-e068b215-0026-4354-b347-8fb2766f73a2')]"
          },
          "UsersOrGroupsThatMayBackUpFilesAndDirectories": {
            "value": "[parameters('UsersOrGroupsThatMayBackUpFilesAndDirectories-e068b215-0026-4354-b347-8fb2766f73a2')]"
          },
          "UsersOrGroupsThatMayChangeTheSystemTime": {
            "value": "[parameters('UsersOrGroupsThatMayChangeTheSystemTime-e068b215-0026-4354-b347-8fb2766f73a2')]"
          },
          "UsersOrGroupsThatMayChangeTheTimeZone": {
            "value": "[parameters('UsersOrGroupsThatMayChangeTheTimeZone-e068b215-0026-4354-b347-8fb2766f73a2')]"
          },
          "UsersOrGroupsThatMayCreateATokenObject": {
            "value": "[parameters('UsersOrGroupsThatMayCreateATokenObject-e068b215-0026-4354-b347-8fb2766f73a2')]"
          },
          "UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob": {
            "value": "[parameters('UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob-e068b215-0026-4354-b347-8fb2766f73a2')]"
          },
          "UsersAndGroupsThatAreDeniedLoggingOnAsAService": {
            "value": "[parameters('UsersAndGroupsThatAreDeniedLoggingOnAsAService-e068b215-0026-4354-b347-8fb2766f73a2')]"
          },
          "UsersAndGroupsThatAreDeniedLocalLogon": {
            "value": "[parameters('UsersAndGroupsThatAreDeniedLocalLogon-e068b215-0026-4354-b347-8fb2766f73a2')]"
          },
          "UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices": {
            "value": "[parameters('UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices-e068b215-0026-4354-b347-8fb2766f73a2')]"
          },
          "UserAndGroupsThatMayForceShutdownFromARemoteSystem": {
            "value": "[parameters('UserAndGroupsThatMayForceShutdownFromARemoteSystem-e068b215-0026-4354-b347-8fb2766f73a2')]"
          },
          "UsersAndGroupsThatMayRestoreFilesAndDirectories": {
            "value": "[parameters('UsersAndGroupsThatMayRestoreFilesAndDirectories-e068b215-0026-4354-b347-8fb2766f73a2')]"
          },
          "UsersAndGroupsThatMayShutDownTheSystem": {
            "value": "[parameters('UsersAndGroupsThatMayShutDownTheSystem-e068b215-0026-4354-b347-8fb2766f73a2')]"
          },
          "UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects": {
            "value": "[parameters('UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects-e068b215-0026-4354-b347-8fb2766f73a2')]"
          },
          "effect": {
            "value": "[parameters('effect-e068b215-0026-4354-b347-8fb2766f73a2')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "5e1de0e3-42cb-4ebc-a86d-61d0c619ca48",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5e1de0e3-42cb-4ebc-a86d-61d0c619ca48",
        "definitionVersion": "3.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_2",
          "Cyber_Essentials_v3.1_4"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-5e1de0e3-42cb-4ebc-a86d-61d0c619ca48')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "d26f7642-7545-4e18-9b75-8c9bbdee3a9a",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d26f7642-7545-4e18-9b75-8c9bbdee3a9a",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_2",
          "Cyber_Essentials_v3.1_4"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-d26f7642-7545-4e18-9b75-8c9bbdee3a9a')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "97566dd7-78ae-4997-8b36-1c7bfe0d8121",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/97566dd7-78ae-4997-8b36-1c7bfe0d8121",
        "definitionVersion": "4.*.*-preview",
        "groupNames": [
          "Cyber_Essentials_v3.1_2",
          "Cyber_Essentials_v3.1_5"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-97566dd7-78ae-4997-8b36-1c7bfe0d8121')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "d416745a-506c-48b6-8ab1-83cb814bcaa3",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d416745a-506c-48b6-8ab1-83cb814bcaa3",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_1",
          "Cyber_Essentials_v3.1_3",
          "Cyber_Essentials_v3.1_5"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-d416745a-506c-48b6-8ab1-83cb814bcaa3')]"
          },
          "virtualNetworkId": {
            "value": "[parameters('virtualNetworkId-d416745a-506c-48b6-8ab1-83cb814bcaa3')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "6581d072-105e-4418-827f-bd446d56421b",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6581d072-105e-4418-827f-bd446d56421b",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_3",
          "Cyber_Essentials_v3.1_5"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-6581d072-105e-4418-827f-bd446d56421b')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "c9d007d0-c057-4772-b18c-01e546713bcd",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c9d007d0-c057-4772-b18c-01e546713bcd",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_1",
          "Cyber_Essentials_v3.1_4"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-c9d007d0-c057-4772-b18c-01e546713bcd')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "492a29ed-d143-4f03-b6a4-705ce081b463",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/492a29ed-d143-4f03-b6a4-705ce081b463",
        "definitionVersion": "3.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_2",
          "Cyber_Essentials_v3.1_4",
          "Cyber_Essentials_v3.1_1",
          "Cyber_Essentials_v3.1_3",
          "Cyber_Essentials_v3.1_5"
        ],
        "parameters": {
          "IncludeArcMachines": {
            "value": "[parameters('IncludeArcMachines-492a29ed-d143-4f03-b6a4-705ce081b463')]"
          },
          "UACAdminApprovalModeForTheBuiltinAdministratorAccount": {
            "value": "[parameters('UACAdminApprovalModeForTheBuiltinAdministratorAccount-492a29ed-d143-4f03-b6a4-705ce081b463')]"
          },
          "UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode": {
            "value": "[parameters('UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode-492a29ed-d143-4f03-b6a4-705ce081b463')]"
          },
          "UACDetectApplicationInstallationsAndPromptForElevation": {
            "value": "[parameters('UACDetectApplicationInstallationsAndPromptForElevation-492a29ed-d143-4f03-b6a4-705ce081b463')]"
          },
          "UACRunAllAdministratorsInAdminApprovalMode": {
            "value": "[parameters('UACRunAllAdministratorsInAdminApprovalMode-492a29ed-d143-4f03-b6a4-705ce081b463')]"
          },
          "effect": {
            "value": "[parameters('effect-492a29ed-d143-4f03-b6a4-705ce081b463')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "35d9882c-993d-44e6-87d2-db66ce21b636",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/35d9882c-993d-44e6-87d2-db66ce21b636",
        "definitionVersion": "3.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_1",
          "Cyber_Essentials_v3.1_3",
          "Cyber_Essentials_v3.1_5"
        ],
        "parameters": {
          "IncludeArcMachines": {
            "value": "[parameters('IncludeArcMachines-35d9882c-993d-44e6-87d2-db66ce21b636')]"
          },
          "WindowsFirewallDomainUseProfileSettings": {
            "value": "[parameters('WindowsFirewallDomainUseProfileSettings-35d9882c-993d-44e6-87d2-db66ce21b636')]"
          },
          "WindowsFirewallDomainBehaviorForOutboundConnections": {
            "value": "[parameters('WindowsFirewallDomainBehaviorForOutboundConnections-35d9882c-993d-44e6-87d2-db66ce21b636')]"
          },
          "WindowsFirewallDomainApplyLocalConnectionSecurityRules": {
            "value": "[parameters('WindowsFirewallDomainApplyLocalConnectionSecurityRules-35d9882c-993d-44e6-87d2-db66ce21b636')]"
          },
          "WindowsFirewallDomainApplyLocalFirewallRules": {
            "value": "[parameters('WindowsFirewallDomainApplyLocalFirewallRules-35d9882c-993d-44e6-87d2-db66ce21b636')]"
          },
          "WindowsFirewallDomainDisplayNotifications": {
            "value": "[parameters('WindowsFirewallDomainDisplayNotifications-35d9882c-993d-44e6-87d2-db66ce21b636')]"
          },
          "WindowsFirewallPrivateUseProfileSettings": {
            "value": "[parameters('WindowsFirewallPrivateUseProfileSettings-35d9882c-993d-44e6-87d2-db66ce21b636')]"
          },
          "WindowsFirewallPrivateBehaviorForOutboundConnections": {
            "value": "[parameters('WindowsFirewallPrivateBehaviorForOutboundConnections-35d9882c-993d-44e6-87d2-db66ce21b636')]"
          },
          "WindowsFirewallPrivateApplyLocalConnectionSecurityRules": {
            "value": "[parameters('WindowsFirewallPrivateApplyLocalConnectionSecurityRules-35d9882c-993d-44e6-87d2-db66ce21b636')]"
          },
          "WindowsFirewallPrivateApplyLocalFirewallRules": {
            "value": "[parameters('WindowsFirewallPrivateApplyLocalFirewallRules-35d9882c-993d-44e6-87d2-db66ce21b636')]"
          },
          "WindowsFirewallPrivateDisplayNotifications": {
            "value": "[parameters('WindowsFirewallPrivateDisplayNotifications-35d9882c-993d-44e6-87d2-db66ce21b636')]"
          },
          "WindowsFirewallPublicUseProfileSettings": {
            "value": "[parameters('WindowsFirewallPublicUseProfileSettings-35d9882c-993d-44e6-87d2-db66ce21b636')]"
          },
          "WindowsFirewallPublicBehaviorForOutboundConnections": {
            "value": "[parameters('WindowsFirewallPublicBehaviorForOutboundConnections-35d9882c-993d-44e6-87d2-db66ce21b636')]"
          },
          "WindowsFirewallPublicApplyLocalConnectionSecurityRules": {
            "value": "[parameters('WindowsFirewallPublicApplyLocalConnectionSecurityRules-35d9882c-993d-44e6-87d2-db66ce21b636')]"
          },
          "WindowsFirewallPublicApplyLocalFirewallRules": {
            "value": "[parameters('WindowsFirewallPublicApplyLocalFirewallRules-35d9882c-993d-44e6-87d2-db66ce21b636')]"
          },
          "WindowsFirewallPublicDisplayNotifications": {
            "value": "[parameters('WindowsFirewallPublicDisplayNotifications-35d9882c-993d-44e6-87d2-db66ce21b636')]"
          },
          "WindowsFirewallDomainAllowUnicastResponse": {
            "value": "[parameters('WindowsFirewallDomainAllowUnicastResponse-35d9882c-993d-44e6-87d2-db66ce21b636')]"
          },
          "WindowsFirewallPrivateAllowUnicastResponse": {
            "value": "[parameters('WindowsFirewallPrivateAllowUnicastResponse-35d9882c-993d-44e6-87d2-db66ce21b636')]"
          },
          "WindowsFirewallPublicAllowUnicastResponse": {
            "value": "[parameters('WindowsFirewallPublicAllowUnicastResponse-35d9882c-993d-44e6-87d2-db66ce21b636')]"
          },
          "effect": {
            "value": "[parameters('effect-35d9882c-993d-44e6-87d2-db66ce21b636')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "c9299215-ae47-4f50-9c54-8a392f68a052",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c9299215-ae47-4f50-9c54-8a392f68a052",
        "definitionVersion": "2.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_2",
          "Cyber_Essentials_v3.1_4"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-c9299215-ae47-4f50-9c54-8a392f68a052')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "60d21c4f-21a3-4d94-85f4-b924e6aeeda4",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/60d21c4f-21a3-4d94-85f4-b924e6aeeda4",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_1",
          "Cyber_Essentials_v3.1_4"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-60d21c4f-21a3-4d94-85f4-b924e6aeeda4')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "11e3da8c-1d68-4392-badd-0ff3c43ab5b0",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/11e3da8c-1d68-4392-badd-0ff3c43ab5b0",
        "definitionVersion": "1.*.*-preview",
        "groupNames": [
          "Cyber_Essentials_v3.1_1",
          "Cyber_Essentials_v3.1_4"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-11e3da8c-1d68-4392-badd-0ff3c43ab5b0')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "7698e800-9299-47a6-b3b6-5a0fee576eed",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7698e800-9299-47a6-b3b6-5a0fee576eed",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_1"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-7698e800-9299-47a6-b3b6-5a0fee576eed')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "0820b7b9-23aa-4725-a1ce-ae4558f718e5",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0820b7b9-23aa-4725-a1ce-ae4558f718e5",
        "definitionVersion": "2.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_2",
          "Cyber_Essentials_v3.1_5"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-0820b7b9-23aa-4725-a1ce-ae4558f718e5')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "47a1ee2f-2a2a-4576-bf2a-e0e36709c2b8",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/47a1ee2f-2a2a-4576-bf2a-e0e36709c2b8",
        "definitionVersion": "5.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_1"
        ],
        "parameters": {
          "source": {
            "value": "[parameters('source-47a1ee2f-2a2a-4576-bf2a-e0e36709c2b8')]"
          },
          "warn": {
            "value": "[parameters('warn-47a1ee2f-2a2a-4576-bf2a-e0e36709c2b8')]"
          },
          "effect": {
            "value": "[parameters('effect-47a1ee2f-2a2a-4576-bf2a-e0e36709c2b8')]"
          },
          "excludedNamespaces": {
            "value": "[parameters('excludedNamespaces-47a1ee2f-2a2a-4576-bf2a-e0e36709c2b8')]"
          },
          "namespaces": {
            "value": "[parameters('namespaces-47a1ee2f-2a2a-4576-bf2a-e0e36709c2b8')]"
          },
          "labelSelector": {
            "value": "[parameters('labelSelector-47a1ee2f-2a2a-4576-bf2a-e0e36709c2b8')]"
          },
          "excludedImages": {
            "value": "[parameters('excludedImages-47a1ee2f-2a2a-4576-bf2a-e0e36709c2b8')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "c5447c04-a4d7-4ba8-a263-c9ee321a6858",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c5447c04-a4d7-4ba8-a263-c9ee321a6858",
        "definitionVersion": "3.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_2",
          "Cyber_Essentials_v3.1_4"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-c5447c04-a4d7-4ba8-a263-c9ee321a6858')]"
          },
          "operationName": {
            "value": "[parameters('operationName-c5447c04-a4d7-4ba8-a263-c9ee321a6858')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "146412e9-005c-472b-9e48-c87b72ac229e",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/146412e9-005c-472b-9e48-c87b72ac229e",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_4"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-146412e9-005c-472b-9e48-c87b72ac229e')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "72650e9f-97bc-4b2a-ab5f-9781a9fcecbc",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/72650e9f-97bc-4b2a-ab5f-9781a9fcecbc",
        "definitionVersion": "2.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_1",
          "Cyber_Essentials_v3.1_3",
          "Cyber_Essentials_v3.1_5"
        ],
        "parameters": {
          "IncludeArcMachines": {
            "value": "[parameters('IncludeArcMachines-72650e9f-97bc-4b2a-ab5f-9781a9fcecbc')]"
          },
          "effect": {
            "value": "[parameters('effect-72650e9f-97bc-4b2a-ab5f-9781a9fcecbc')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "32e6bbec-16b6-44c2-be37-c5b672d103cf",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/32e6bbec-16b6-44c2-be37-c5b672d103cf",
        "definitionVersion": "2.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_4",
          "Cyber_Essentials_v3.1_1"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-32e6bbec-16b6-44c2-be37-c5b672d103cf')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "8ac833bd-f505-48d5-887e-c993a1d3eea0",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8ac833bd-f505-48d5-887e-c993a1d3eea0",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_2",
          "Cyber_Essentials_v3.1_4"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-8ac833bd-f505-48d5-887e-c993a1d3eea0')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "e15effd4-2278-4c65-a0da-4d6f6d1890e2",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e15effd4-2278-4c65-a0da-4d6f6d1890e2",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_2",
          "Cyber_Essentials_v3.1_4"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-e15effd4-2278-4c65-a0da-4d6f6d1890e2')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "12d4fa5e-1f9f-4c21-97a9-b99b3c6611b5",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/12d4fa5e-1f9f-4c21-97a9-b99b3c6611b5",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_2",
          "Cyber_Essentials_v3.1_4",
          "Cyber_Essentials_v3.1_5"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-12d4fa5e-1f9f-4c21-97a9-b99b3c6611b5')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "a8793640-60f7-487c-b5c3-1d37215905c4",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a8793640-60f7-487c-b5c3-1d37215905c4",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_4",
          "Cyber_Essentials_v3.1_1"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-a8793640-60f7-487c-b5c3-1d37215905c4')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "9b597639-28e4-48eb-b506-56b05d366257",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9b597639-28e4-48eb-b506-56b05d366257",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_3",
          "Cyber_Essentials_v3.1_5"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-9b597639-28e4-48eb-b506-56b05d366257')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "438c38d2-3772-465a-a9cc-7a6666a275ce",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/438c38d2-3772-465a-a9cc-7a6666a275ce",
        "definitionVersion": "2.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_2",
          "Cyber_Essentials_v3.1_5",
          "Cyber_Essentials_v3.1_4"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-438c38d2-3772-465a-a9cc-7a6666a275ce')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "95bccee9-a7f8-4bec-9ee9-62c3473701fc",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/95bccee9-a7f8-4bec-9ee9-62c3473701fc",
        "definitionVersion": "2.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_1",
          "Cyber_Essentials_v3.1_4",
          "Cyber_Essentials_v3.1_2"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-95bccee9-a7f8-4bec-9ee9-62c3473701fc')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "fdccbe47-f3e3-4213-ad5d-ea459b2fa077",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/fdccbe47-f3e3-4213-ad5d-ea459b2fa077",
        "definitionVersion": "2.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_2",
          "Cyber_Essentials_v3.1_4"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-fdccbe47-f3e3-4213-ad5d-ea459b2fa077')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "d31e5c31-63b2-4f12-887b-e49456834fa1",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d31e5c31-63b2-4f12-887b-e49456834fa1",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_3",
          "Cyber_Essentials_v3.1_5"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-d31e5c31-63b2-4f12-887b-e49456834fa1')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "0e6763cc-5078-4e64-889d-ff4d9a839047",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0e6763cc-5078-4e64-889d-ff4d9a839047",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_3",
          "Cyber_Essentials_v3.1_5"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-0e6763cc-5078-4e64-889d-ff4d9a839047')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "b4dec045-250a-48c2-b5cc-e0c4eec8b5b4",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b4dec045-250a-48c2-b5cc-e0c4eec8b5b4",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_4"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-b4dec045-250a-48c2-b5cc-e0c4eec8b5b4')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "b52376f7-9612-48a1-81cd-1ffe4b61032c",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b52376f7-9612-48a1-81cd-1ffe4b61032c",
        "definitionVersion": "2.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_2",
          "Cyber_Essentials_v3.1_4"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-b52376f7-9612-48a1-81cd-1ffe4b61032c')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "12430be1-6cc8-4527-a9a8-e3d38f250096",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/12430be1-6cc8-4527-a9a8-e3d38f250096",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_2",
          "Cyber_Essentials_v3.1_4",
          "Cyber_Essentials_v3.1_1",
          "Cyber_Essentials_v3.1_3",
          "Cyber_Essentials_v3.1_5"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-12430be1-6cc8-4527-a9a8-e3d38f250096')]"
          },
          "modeRequirement": {
            "value": "[parameters('modeRequirement-12430be1-6cc8-4527-a9a8-e3d38f250096')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "2835b622-407b-4114-9198-6f7064cbe0dc",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2835b622-407b-4114-9198-6f7064cbe0dc",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_3",
          "Cyber_Essentials_v3.1_5"
        ],
        "parameters": {}
      },
      {
        "policyDefinitionReferenceId": "0a9fbe0d-c5c4-4da8-87d8-f4fd77338835",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0a9fbe0d-c5c4-4da8-87d8-f4fd77338835",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_3",
          "Cyber_Essentials_v3.1_5"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-0a9fbe0d-c5c4-4da8-87d8-f4fd77338835')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "22730e10-96f6-4aac-ad84-9383d35b5917",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/22730e10-96f6-4aac-ad84-9383d35b5917",
        "definitionVersion": "3.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_2",
          "Cyber_Essentials_v3.1_5",
          "Cyber_Essentials_v3.1_1",
          "Cyber_Essentials_v3.1_3"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-22730e10-96f6-4aac-ad84-9383d35b5917')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "ea4d6841-2173-4317-9747-ff522a45120f",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ea4d6841-2173-4317-9747-ff522a45120f",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_1"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-ea4d6841-2173-4317-9747-ff522a45120f')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "d38668f5-d155-42c7-ab3d-9b57b50f8fbf",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d38668f5-d155-42c7-ab3d-9b57b50f8fbf",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_3",
          "Cyber_Essentials_v3.1_5"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-d38668f5-d155-42c7-ab3d-9b57b50f8fbf')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "abda6d70-9778-44e7-84a8-06713e6db027",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/abda6d70-9778-44e7-84a8-06713e6db027",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_4"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-abda6d70-9778-44e7-84a8-06713e6db027')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "0564d078-92f5-4f97-8398-b9f58a51f70b",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0564d078-92f5-4f97-8398-b9f58a51f70b",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_2",
          "Cyber_Essentials_v3.1_5",
          "Cyber_Essentials_v3.1_1",
          "Cyber_Essentials_v3.1_3"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-0564d078-92f5-4f97-8398-b9f58a51f70b')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "0a1302fb-a631-4106-9753-f3d494733990",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0a1302fb-a631-4106-9753-f3d494733990",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_2",
          "Cyber_Essentials_v3.1_5",
          "Cyber_Essentials_v3.1_1",
          "Cyber_Essentials_v3.1_3"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-0a1302fb-a631-4106-9753-f3d494733990')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "b954148f-4c11-4c38-8221-be76711e194a",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b954148f-4c11-4c38-8221-be76711e194a",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_2",
          "Cyber_Essentials_v3.1_4"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-b954148f-4c11-4c38-8221-be76711e194a')]"
          },
          "operationName": {
            "value": "[parameters('operationName-b954148f-4c11-4c38-8221-be76711e194a')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "3ff60f98-7fa4-410a-9f7f-0b00f5afdbdd",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3ff60f98-7fa4-410a-9f7f-0b00f5afdbdd",
        "definitionVersion": "3.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_1",
          "Cyber_Essentials_v3.1_4",
          "Cyber_Essentials_v3.1_2",
          "Cyber_Essentials_v3.1_5"
        ],
        "parameters": {
          "IncludeArcMachines": {
            "value": "[parameters('IncludeArcMachines-3ff60f98-7fa4-410a-9f7f-0b00f5afdbdd')]"
          },
          "NetworkAccessRemotelyAccessibleRegistryPaths": {
            "value": "[parameters('NetworkAccessRemotelyAccessibleRegistryPaths-3ff60f98-7fa4-410a-9f7f-0b00f5afdbdd')]"
          },
          "NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths": {
            "value": "[parameters('NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths-3ff60f98-7fa4-410a-9f7f-0b00f5afdbdd')]"
          },
          "NetworkAccessSharesThatCanBeAccessedAnonymously": {
            "value": "[parameters('NetworkAccessSharesThatCanBeAccessedAnonymously-3ff60f98-7fa4-410a-9f7f-0b00f5afdbdd')]"
          },
          "effect": {
            "value": "[parameters('effect-3ff60f98-7fa4-410a-9f7f-0b00f5afdbdd')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "0fea8f8a-4169-495d-8307-30ec335f387d",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0fea8f8a-4169-495d-8307-30ec335f387d",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_2",
          "Cyber_Essentials_v3.1_5"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-0fea8f8a-4169-495d-8307-30ec335f387d')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "d9844e8a-1437-4aeb-a32c-0c992f056095",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d9844e8a-1437-4aeb-a32c-0c992f056095",
        "definitionVersion": "2.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_2",
          "Cyber_Essentials_v3.1_4"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-d9844e8a-1437-4aeb-a32c-0c992f056095')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "ee984370-154a-4ee8-9726-19d900e56fc0",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ee984370-154a-4ee8-9726-19d900e56fc0",
        "definitionVersion": "3.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_2",
          "Cyber_Essentials_v3.1_4",
          "Cyber_Essentials_v3.1_1",
          "Cyber_Essentials_v3.1_3",
          "Cyber_Essentials_v3.1_5"
        ],
        "parameters": {
          "IncludeArcMachines": {
            "value": "[parameters('IncludeArcMachines-ee984370-154a-4ee8-9726-19d900e56fc0')]"
          },
          "AccountsGuestAccountStatus": {
            "value": "[parameters('AccountsGuestAccountStatus-ee984370-154a-4ee8-9726-19d900e56fc0')]"
          },
          "effect": {
            "value": "[parameters('effect-ee984370-154a-4ee8-9726-19d900e56fc0')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "78215662-041e-49ed-a9dd-5385911b3a1f",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/78215662-041e-49ed-a9dd-5385911b3a1f",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_2",
          "Cyber_Essentials_v3.1_4"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-78215662-041e-49ed-a9dd-5385911b3a1f')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "df73bd95-24da-4a4f-96b9-4e8b94b402bd",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/df73bd95-24da-4a4f-96b9-4e8b94b402bd",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_2",
          "Cyber_Essentials_v3.1_5",
          "Cyber_Essentials_v3.1_4"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-df73bd95-24da-4a4f-96b9-4e8b94b402bd')]"
          },
          "endpointType": {
            "value": "[parameters('endpointType-df73bd95-24da-4a4f-96b9-4e8b94b402bd')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "1c988dd6-ade4-430f-a608-2a3e5b0a6d38",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1c988dd6-ade4-430f-a608-2a3e5b0a6d38",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_3",
          "Cyber_Essentials_v3.1_5"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-1c988dd6-ade4-430f-a608-2a3e5b0a6d38')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "e71308d3-144b-4262-b144-efdc3cc90517",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e71308d3-144b-4262-b144-efdc3cc90517",
        "definitionVersion": "3.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_2",
          "Cyber_Essentials_v3.1_5",
          "Cyber_Essentials_v3.1_1",
          "Cyber_Essentials_v3.1_3"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-e71308d3-144b-4262-b144-efdc3cc90517')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "30f71ea1-ac77-4f26-9fc5-2d926bbd4ba7",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/30f71ea1-ac77-4f26-9fc5-2d926bbd4ba7",
        "definitionVersion": "2.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_2",
          "Cyber_Essentials_v3.1_4"
        ],
        "parameters": {
          "IncludeArcMachines": {
            "value": "[parameters('IncludeArcMachines-30f71ea1-ac77-4f26-9fc5-2d926bbd4ba7')]"
          },
          "MembersToInclude": {
            "value": "[parameters('MembersToInclude-30f71ea1-ac77-4f26-9fc5-2d926bbd4ba7')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "5d4e3c65-4873-47be-94f3-6f8b953a3598",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5d4e3c65-4873-47be-94f3-6f8b953a3598",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_2",
          "Cyber_Essentials_v3.1_4"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-5d4e3c65-4873-47be-94f3-6f8b953a3598')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "564feb30-bf6a-4854-b4bb-0d2d2d1e6c66",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/564feb30-bf6a-4854-b4bb-0d2d2d1e6c66",
        "definitionVersion": "2.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_1",
          "Cyber_Essentials_v3.1_3",
          "Cyber_Essentials_v3.1_5"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-564feb30-bf6a-4854-b4bb-0d2d2d1e6c66')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "098fc59e-46c7-4d99-9b16-64990e543d75",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/098fc59e-46c7-4d99-9b16-64990e543d75",
        "definitionVersion": "6.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_1",
          "Cyber_Essentials_v3.1_3",
          "Cyber_Essentials_v3.1_5"
        ],
        "parameters": {
          "source": {
            "value": "[parameters('source-098fc59e-46c7-4d99-9b16-64990e543d75')]"
          },
          "warn": {
            "value": "[parameters('warn-098fc59e-46c7-4d99-9b16-64990e543d75')]"
          },
          "effect": {
            "value": "[parameters('effect-098fc59e-46c7-4d99-9b16-64990e543d75')]"
          },
          "excludedNamespaces": {
            "value": "[parameters('excludedNamespaces-098fc59e-46c7-4d99-9b16-64990e543d75')]"
          },
          "namespaces": {
            "value": "[parameters('namespaces-098fc59e-46c7-4d99-9b16-64990e543d75')]"
          },
          "labelSelector": {
            "value": "[parameters('labelSelector-098fc59e-46c7-4d99-9b16-64990e543d75')]"
          },
          "allowedHostPaths": {
            "value": "[parameters('allowedHostPaths-098fc59e-46c7-4d99-9b16-64990e543d75')]"
          },
          "excludedContainers": {
            "value": "[parameters('excludedContainers-098fc59e-46c7-4d99-9b16-64990e543d75')]"
          },
          "excludedImages": {
            "value": "[parameters('excludedImages-098fc59e-46c7-4d99-9b16-64990e543d75')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "c3d20c29-b36d-48fe-808b-99a87530ad99",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c3d20c29-b36d-48fe-808b-99a87530ad99",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_3",
          "Cyber_Essentials_v3.1_5"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-c3d20c29-b36d-48fe-808b-99a87530ad99')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "6c53d030-cc64-46f0-906d-2bc061cd1334",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6c53d030-cc64-46f0-906d-2bc061cd1334",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_2",
          "Cyber_Essentials_v3.1_4"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-6c53d030-cc64-46f0-906d-2bc061cd1334')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "8405fdab-1faf-48aa-b702-999c9c172094",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8405fdab-1faf-48aa-b702-999c9c172094",
        "definitionVersion": "2.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_2",
          "Cyber_Essentials_v3.1_5",
          "Cyber_Essentials_v3.1_4"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-8405fdab-1faf-48aa-b702-999c9c172094')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "21a6bc25-125e-4d13-b82d-2e19b7208ab7",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/21a6bc25-125e-4d13-b82d-2e19b7208ab7",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_1",
          "Cyber_Essentials_v3.1_4"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-21a6bc25-125e-4d13-b82d-2e19b7208ab7')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "1bc02227-0cb6-4e11-8f53-eb0b22eab7e8",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1bc02227-0cb6-4e11-8f53-eb0b22eab7e8",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_2",
          "Cyber_Essentials_v3.1_4"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-1bc02227-0cb6-4e11-8f53-eb0b22eab7e8')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "0a075868-4c26-42ef-914c-5bc007359560",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0a075868-4c26-42ef-914c-5bc007359560",
        "definitionVersion": "2.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_2",
          "Cyber_Essentials_v3.1_4"
        ],
        "parameters": {
          "maximumValidityInMonths": {
            "value": "[parameters('maximumValidityInMonths-0a075868-4c26-42ef-914c-5bc007359560')]"
          },
          "effect": {
            "value": "[parameters('effect-0a075868-4c26-42ef-914c-5bc007359560')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "deeddb44-9f94-4903-9fa0-081d524406e3",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/deeddb44-9f94-4903-9fa0-081d524406e3",
        "definitionVersion": "2.*.*-preview",
        "groupNames": [
          "Cyber_Essentials_v3.1_1",
          "Cyber_Essentials_v3.1_4"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-deeddb44-9f94-4903-9fa0-081d524406e3')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "abfb7388-5bf4-4ad7-ba99-2cd2f41cebb9",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/abfb7388-5bf4-4ad7-ba99-2cd2f41cebb9",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_3",
          "Cyber_Essentials_v3.1_5"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-abfb7388-5bf4-4ad7-ba99-2cd2f41cebb9')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "9f061a12-e40d-4183-a00e-171812443373",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9f061a12-e40d-4183-a00e-171812443373",
        "definitionVersion": "4.*.*",
        "groupNames": [
          "Cyber_Essentials_v3.1_2",
          "Cyber_Essentials_v3.1_5",
          "Cyber_Essentials_v3.1_1",
          "Cyber_Essentials_v3.1_3"
        ],
        "parameters": {
          "source": {
            "value": "[parameters('source-9f061a12-e40d-4183-a00e-171812443373')]"
          },
          "warn": {
            "value": "[parameters('warn-9f061a12-e40d-4183-a00e-171812443373')]"
          },
          "effect": {
            "value": "[parameters('effect-9f061a12-e40d-4183-a00e-171812443373')]"
          },
          "excludedNamespaces": {
            "value": "[parameters('excludedNamespaces-9f061a12-e40d-4183-a00e-171812443373')]"
          },
          "namespaces": {
            "value": "[parameters('namespaces-9f061a12-e40d-4183-a00e-171812443373')]"
          },
          "labelSelector": {
            "value": "[parameters('labelSelector-9f061a12-e40d-4183-a00e-171812443373')]"
          }
        }
      }
    ]
  },
  "id": "/providers/Microsoft.Authorization/policySetDefinitions/b2f588d7-1ed5-47c7-977d-b93dff520c4c",
  "name": "b2f588d7-1ed5-47c7-977d-b93dff520c4c"
}