built-in-policies/policySetDefinitions/Regulatory Compliance/UK_NCSC_CAF_v3.2.json

{
  "properties": {
    "displayName": "NCSC Cyber Assurance Framework (CAF) v3.2",
    "policyType": "BuiltIn",
    "description": "UK framework providing cybersecurity guidance for critical national infrastructure to protect systems and data.",
    "metadata": {
      "version": "1.1.0",
      "category": "Regulatory Compliance"
    },
    "version": "1.1.0",
    "policyDefinitionGroups": [
      {
        "name": "UK_NCSC_CAF_v3.2_B2.a",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/UK_NCSC_CAF_v3.2_B2.a"
      },
      {
        "name": "UK_NCSC_CAF_v3.2_B4.b",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/UK_NCSC_CAF_v3.2_B4.b"
      },
      {
        "name": "UK_NCSC_CAF_v3.2_C1.c",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/UK_NCSC_CAF_v3.2_C1.c"
      },
      {
        "name": "UK_NCSC_CAF_v3.2_C1.d",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/UK_NCSC_CAF_v3.2_C1.d"
      },
      {
        "name": "UK_NCSC_CAF_v3.2_C",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/UK_NCSC_CAF_v3.2_C"
      },
      {
        "name": "UK_NCSC_CAF_v3.2_C1",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/UK_NCSC_CAF_v3.2_C1"
      },
      {
        "name": "UK_NCSC_CAF_v3.2_C2",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/UK_NCSC_CAF_v3.2_C2"
      },
      {
        "name": "UK_NCSC_CAF_v3.2_C2.b",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/UK_NCSC_CAF_v3.2_C2.b"
      },
      {
        "name": "UK_NCSC_CAF_v3.2_C1.b",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/UK_NCSC_CAF_v3.2_C1.b"
      },
      {
        "name": "UK_NCSC_CAF_v3.2_B3.d",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/UK_NCSC_CAF_v3.2_B3.d"
      },
      {
        "name": "UK_NCSC_CAF_v3.2_D1",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/UK_NCSC_CAF_v3.2_D1"
      },
      {
        "name": "UK_NCSC_CAF_v3.2_B2.c",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/UK_NCSC_CAF_v3.2_B2.c"
      },
      {
        "name": "UK_NCSC_CAF_v3.2_B4",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/UK_NCSC_CAF_v3.2_B4"
      },
      {
        "name": "UK_NCSC_CAF_v3.2_D",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/UK_NCSC_CAF_v3.2_D"
      },
      {
        "name": "UK_NCSC_CAF_v3.2_B3.b",
        "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/UK_NCSC_CAF_v3.2_B3.b"
      }
    ],
    "parameters": {
      "IncludeArcMachines-ea53dbee-c6c9-4f0e-9f9e-de0039b78023": {
        "type": "string",
        "defaultValue": "false",
        "allowedValues": [
          "true",
          "false"
        ],
        "metadata": {
          "displayName": "Include Arc connected servers",
          "description": "By selecting this option, you agree to be charged monthly per Arc connected machine.",
          "portalReview": "true"
        }
      },
      "effect-ea53dbee-c6c9-4f0e-9f9e-de0039b78023": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-3b980d31-7904-4bb7-8575-5665739a8052": {
        "type": "String",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "operationName-3b980d31-7904-4bb7-8575-5665739a8052": {
        "type": "String",
        "allowedValues": [
          "Microsoft.Security/policies/write",
          "Microsoft.Security/securitySolutions/write",
          "Microsoft.Security/securitySolutions/delete"
        ],
        "metadata": {
          "displayName": "Operation Name",
          "description": "Security Operation name for which activity log alert should exist"
        }
      },
      "effect-c251913d-7d24-4958-af87-478ed3b9ba41": {
        "type": "string",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-47031206-ce96-41f8-861b-6a915f3de284": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-6b2122c1-8120-4ff5-801b-17625a355590": {
        "type": "String",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-055aa869-bc98-4af8-bafc-23f1ab6ffe2c": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-a1181c5f-672a-477a-979a-7d58aa086233": {
        "type": "string",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-3e596b57-105f-48a6-be97-03e9243bad6e": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-3dc5edcd-002d-444c-b216-e123bbfa37c0": {
        "type": "String",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "source-c26596ff-4d70-4e6a-9a30-c2506bd2f80c": {
        "type": "String",
        "defaultValue": "Original",
        "allowedValues": [
          "All",
          "Generated",
          "Original"
        ],
        "metadata": {
          "displayName": "Source",
          "description": "The source k8s object for constraint evaluation. 'Original' means only evaluate against the specific GroupVersionKind specified in the policy definition. 'Generated' means only evaluate against k8s objects generated by Gatekeeper ExpansionTemplates. 'All' means evaluate against both the original object and any generated ones."
        }
      },
      "warn-c26596ff-4d70-4e6a-9a30-c2506bd2f80c": {
        "type": "Boolean",
        "defaultValue": false,
        "metadata": {
          "displayName": "Warn",
          "description": "Whether or not to return warnings back to the user in the kubectl cli"
        }
      },
      "effect-c26596ff-4d70-4e6a-9a30-c2506bd2f80c": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "excludedNamespaces-c26596ff-4d70-4e6a-9a30-c2506bd2f80c": {
        "type": "Array",
        "defaultValue": [
          "kube-system",
          "gatekeeper-system",
          "azure-arc",
          "azure-extensions-usage-system"
        ],
        "metadata": {
          "displayName": "Namespace exclusions",
          "description": "List of Kubernetes namespaces to exclude from policy evaluation. System namespaces \"kube-system\", \"gatekeeper-system\" and \"azure-arc\" are always excluded by design. \"azure-extensions-usage-system\" is optional to remove."
        }
      },
      "namespaces-c26596ff-4d70-4e6a-9a30-c2506bd2f80c": {
        "type": "Array",
        "defaultValue": [],
        "metadata": {
          "displayName": "Namespace inclusions",
          "description": "List of Kubernetes namespaces to only include in policy evaluation. An empty list means the policy is applied to all resources in all namespaces."
        }
      },
      "labelSelector-c26596ff-4d70-4e6a-9a30-c2506bd2f80c": {
        "type": "object",
        "defaultValue": {},
        "metadata": {
          "displayName": "Kubernetes label selector",
          "description": "Label query to select Kubernetes resources for policy evaluation. An empty label selector matches all Kubernetes resources."
        }
      },
      "allowedCapabilities-c26596ff-4d70-4e6a-9a30-c2506bd2f80c": {
        "type": "Array",
        "defaultValue": [],
        "metadata": {
          "displayName": "Allowed capabilities",
          "description": "The list of capabilities that are allowed to be added to a container. Provide empty list as input to block everything.",
          "portalReview": true
        }
      },
      "requiredDropCapabilities-c26596ff-4d70-4e6a-9a30-c2506bd2f80c": {
        "type": "Array",
        "defaultValue": [],
        "metadata": {
          "displayName": "Required drop capabilities",
          "description": "The list of capabilities that must be dropped by a container.",
          "portalReview": true
        }
      },
      "excludedContainers-c26596ff-4d70-4e6a-9a30-c2506bd2f80c": {
        "type": "Array",
        "defaultValue": [],
        "metadata": {
          "displayName": "Containers exclusions",
          "description": "The list of InitContainers and Containers to exclude from policy evaluation. The identify is the name of container. Use an empty list to apply this policy to all containers in all namespaces."
        }
      },
      "excludedImages-c26596ff-4d70-4e6a-9a30-c2506bd2f80c": {
        "type": "Array",
        "defaultValue": [],
        "metadata": {
          "displayName": "Image exclusions",
          "description": "The list of InitContainers and Containers to exclude from policy evaluation. The identifier is the image of container. Prefix-matching can be signified with `*`. For example: `myregistry.azurecr.io/istio:*`. It is recommended that users use the fully-qualified Docker image name (e.g. start with a domain name) in order to avoid unexpectedly exempting images from an untrusted repository.",
          "portalReview": true
        }
      },
      "effect-98728c90-32c7-4049-8429-847dc0f4fe37": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-5450f5bd-9c72-4390-a9c4-a7aba4edfdd2": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "IncludeArcMachines-33936777-f2ac-45aa-82ec-07958ec9ade4": {
        "type": "string",
        "defaultValue": "false",
        "allowedValues": [
          "true",
          "false"
        ],
        "metadata": {
          "displayName": "Include Arc connected servers",
          "description": "By selecting this option, you agree to be charged monthly per Arc connected machine.",
          "portalReview": "true"
        }
      },
      "AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits-33936777-f2ac-45aa-82ec-07958ec9ade4": {
        "type": "string",
        "defaultValue": "0",
        "metadata": {
          "displayName": "Audit: Shut down system immediately if unable to log security audits",
          "description": "Audits if the system will shut down when unable to log Security events."
        }
      },
      "effect-33936777-f2ac-45aa-82ec-07958ec9ade4": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-152b15f7-8e1f-4c1f-ab71-8c010ba5dbc0": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-efbde977-ba53-4479-b8e9-10b957924fbf": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "IncludeArcMachines-e6955644-301c-44b5-a4c4-528577de6861": {
        "type": "string",
        "defaultValue": "false",
        "allowedValues": [
          "true",
          "false"
        ],
        "metadata": {
          "displayName": "Include Arc connected servers",
          "description": "By selecting this option, you agree to be charged monthly per Arc connected machine.",
          "portalReview": "true"
        }
      },
      "effect-e6955644-301c-44b5-a4c4-528577de6861": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-0da106f2-4ca3-48e8-bc85-c638fe6aea8f": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-f4b53539-8df9-40e4-86c6-6b607703bd4e": {
        "type": "string",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "IncludeArcMachines-f71be03e-e25b-4d0f-b8bc-9b3e309b66c0": {
        "type": "string",
        "defaultValue": "false",
        "allowedValues": [
          "true",
          "false"
        ],
        "metadata": {
          "displayName": "Include Arc connected servers",
          "description": "By selecting this option, you agree to be charged monthly per Arc connected machine.",
          "portalReview": "true"
        }
      },
      "RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders-f71be03e-e25b-4d0f-b8bc-9b3e309b66c0": {
        "type": "string",
        "defaultValue": "0",
        "metadata": {
          "displayName": "Recovery console: Allow floppy copy and access to all drives and all folders",
          "description": "Specifies whether to make the Recovery Console SET command available, which allows setting of recovery console environment variables."
        }
      },
      "effect-f71be03e-e25b-4d0f-b8bc-9b3e309b66c0": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "IncludeArcMachines-69bf4abd-ca1e-4cf6-8b5a-762d42e61d4f": {
        "type": "string",
        "defaultValue": "false",
        "allowedValues": [
          "true",
          "false"
        ],
        "metadata": {
          "displayName": "Include Arc connected servers",
          "description": "By selecting this option, you agree to be charged monthly per Arc connected machine.",
          "portalReview": "true"
        }
      },
      "MembersToExclude-69bf4abd-ca1e-4cf6-8b5a-762d42e61d4f": {
        "type": "string",
        "metadata": {
          "displayName": "Members to exclude",
          "description": "A semicolon-separated list of members that should be excluded in the Administrators local group. Ex: Administrator; myUser1; myUser2"
        }
      },
      "effect-2158ddbe-fefa-408e-b43f-d4faef8ff3b8": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-6e2593d9-add6-4083-9c9b-4b7d2188c899": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-8c6a50c6-9ffd-4ae7-986f-5fa6111f9a54": {
        "type": "string",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "IncludeArcMachines-3d2a3320-2a72-4c67-ac5f-caa40fbee2b2": {
        "type": "string",
        "defaultValue": "false",
        "allowedValues": [
          "true",
          "false"
        ],
        "metadata": {
          "displayName": "Include Arc connected servers",
          "description": "By selecting this option, you agree to be charged monthly per Arc connected machine.",
          "portalReview": "true"
        }
      },
      "Members-3d2a3320-2a72-4c67-ac5f-caa40fbee2b2": {
        "type": "string",
        "defaultValue": "Administrator",
        "allowedValues": [],
        "metadata": {
          "displayName": "Members",
          "description": "A semicolon-separated list of all the expected members of the Administrators local group. Ex: Administrator; myUser1; myUser2"
        }
      },
      "IncludeArcMachines-bf16e0bb-31e1-4646-8202-60a235cc7e74": {
        "type": "string",
        "defaultValue": "false",
        "allowedValues": [
          "true",
          "false"
        ],
        "metadata": {
          "displayName": "Include Arc connected servers",
          "description": "By selecting this option, you agree to be charged monthly per Arc connected machine.",
          "portalReview": "true"
        }
      },
      "effect-bf16e0bb-31e1-4646-8202-60a235cc7e74": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-8dfab9c4-fe7b-49ad-85e4-1e9be085358f": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-46aa9b05-0e60-4eae-a88b-1e9d374fa515": {
        "type": "string",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "allowedEncryptionSets-d461a302-a187-421a-89ac-84acdb4edc04": {
        "type": "Array",
        "metadata": {
          "displayName": "Allowed disk encryption set",
          "description": "The list of allowed disk encryption sets for managed disks.",
          "strongType": "Microsoft.Compute/diskEncryptionSets"
        }
      },
      "effect-d461a302-a187-421a-89ac-84acdb4edc04": {
        "type": "string",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-3bc8a0d5-38e0-4a3d-a657-2cb64468fc34": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-ca91455f-eace-4f96-be59-e6e2c35b4816": {
        "type": "string",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-ab6a902f-9493-453b-928d-62c30b11b5a6": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-3d9f5e4c-9947-4579-9539-2a7695fbc187": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-e96a9a5f-07ca-471b-9bc5-6a0f33cbd68f": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "IncludeArcMachines-4ceb8dc2-559c-478b-a15b-733fbf1e3738": {
        "type": "string",
        "defaultValue": "false",
        "allowedValues": [
          "true",
          "false"
        ],
        "metadata": {
          "displayName": "Include Arc connected servers",
          "description": "By selecting this option, you agree to be charged monthly per Arc connected machine.",
          "portalReview": "true"
        }
      },
      "MaximumPasswordAge-4ceb8dc2-559c-478b-a15b-733fbf1e3738": {
        "type": "string",
        "defaultValue": "70",
        "metadata": {
          "displayName": "Maximum password age",
          "description": "The Maximum password age setting determines the period of time (in days) that a password can be used before the system requires the user to change it.",
          "portalReview": "true"
        }
      },
      "effect-4ceb8dc2-559c-478b-a15b-733fbf1e3738": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "logAnalyticsWorkspaceId-f47b5582-33ec-4c5c-87c0-b010a6b2e917": {
        "type": "String",
        "metadata": {
          "displayName": "Log Analytics Workspace Id that virtual machines should be configured for",
          "description": "This is the Id (GUID) of the Log Analytics Workspace that the virtual machines should be configured for."
        }
      },
      "effect-f47b5582-33ec-4c5c-87c0-b010a6b2e917": {
        "type": "String",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "source-95edb821-ddaf-4404-9732-666045e056b4": {
        "type": "String",
        "defaultValue": "Original",
        "allowedValues": [
          "All",
          "Generated",
          "Original"
        ],
        "metadata": {
          "displayName": "Source",
          "description": "The source k8s object for constraint evaluation. 'Original' means only evaluate against the specific GroupVersionKind specified in the policy definition. 'Generated' means only evaluate against k8s objects generated by Gatekeeper ExpansionTemplates. 'All' means evaluate against both the original object and any generated ones."
        }
      },
      "warn-95edb821-ddaf-4404-9732-666045e056b4": {
        "type": "Boolean",
        "defaultValue": false,
        "metadata": {
          "displayName": "Warn",
          "description": "Whether or not to return warnings back to the user in the kubectl cli"
        }
      },
      "effect-95edb821-ddaf-4404-9732-666045e056b4": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "excludedNamespaces-95edb821-ddaf-4404-9732-666045e056b4": {
        "type": "Array",
        "defaultValue": [
          "kube-system",
          "gatekeeper-system",
          "azure-arc",
          "azure-extensions-usage-system"
        ],
        "metadata": {
          "displayName": "Namespace exclusions",
          "description": "List of Kubernetes namespaces to exclude from policy evaluation. System namespaces \"kube-system\", \"gatekeeper-system\" and \"azure-arc\" are always excluded by design. \"azure-extensions-usage-system\" is optional to remove."
        }
      },
      "namespaces-95edb821-ddaf-4404-9732-666045e056b4": {
        "type": "Array",
        "defaultValue": [],
        "metadata": {
          "displayName": "Namespace inclusions",
          "description": "List of Kubernetes namespaces to only include in policy evaluation. An empty list means the policy is applied to all resources in all namespaces."
        }
      },
      "labelSelector-95edb821-ddaf-4404-9732-666045e056b4": {
        "type": "object",
        "defaultValue": {},
        "metadata": {
          "displayName": "Kubernetes label selector",
          "description": "Label query to select Kubernetes resources for policy evaluation. An empty label selector matches all Kubernetes resources."
        }
      },
      "excludedContainers-95edb821-ddaf-4404-9732-666045e056b4": {
        "type": "Array",
        "defaultValue": [],
        "metadata": {
          "displayName": "Containers exclusions",
          "description": "The list of InitContainers and Containers to exclude from policy evaluation. The identify is the name of container. Use an empty list to apply this policy to all containers in all namespaces."
        }
      },
      "excludedImages-95edb821-ddaf-4404-9732-666045e056b4": {
        "type": "Array",
        "defaultValue": [],
        "metadata": {
          "displayName": "Image exclusions",
          "description": "The list of InitContainers and Containers to exclude from policy evaluation. The identifier is the image of container. Prefix-matching can be signified with `*`. For example: `myregistry.azurecr.io/istio:*`. It is recommended that users use the fully-qualified Docker image name (e.g. start with a domain name) in order to avoid unexpectedly exempting images from an untrusted repository.",
          "portalReview": true
        }
      },
      "effect-a70ca396-0a34-413a-88e1-b956c1e683be": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "IncludeArcMachines-e068b215-0026-4354-b347-8fb2766f73a2": {
        "type": "string",
        "defaultValue": "false",
        "allowedValues": [
          "true",
          "false"
        ],
        "metadata": {
          "displayName": "Include Arc connected servers",
          "description": "By selecting this option, you agree to be charged monthly per Arc connected machine.",
          "portalReview": "true"
        }
      },
      "UsersOrGroupsThatMayAccessThisComputerFromTheNetwork-e068b215-0026-4354-b347-8fb2766f73a2": {
        "type": "string",
        "defaultValue": "Administrators, Authenticated Users",
        "metadata": {
          "displayName": "Users or groups that may access this computer from the network",
          "description": "Specifies which remote users on the network are permitted to connect to the computer. This does not include Remote Desktop Connection."
        }
      },
      "UsersOrGroupsThatMayLogOnLocally-e068b215-0026-4354-b347-8fb2766f73a2": {
        "type": "string",
        "defaultValue": "Administrators",
        "metadata": {
          "displayName": "Users or groups that may log on locally",
          "description": "Specifies which users or groups can interactively log on to the computer. Users who attempt to log on via Remote Desktop Connection or IIS also require this user right."
        }
      },
      "UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices-e068b215-0026-4354-b347-8fb2766f73a2": {
        "type": "string",
        "defaultValue": "Administrators, Remote Desktop Users",
        "metadata": {
          "displayName": "Users or groups that may log on through Remote Desktop Services",
          "description": "Specifies which users or groups are permitted to log on as a Terminal Services client, Remote Desktop, or for Remote Assistance."
        }
      },
      "UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork-e068b215-0026-4354-b347-8fb2766f73a2": {
        "type": "string",
        "defaultValue": "Guests",
        "metadata": {
          "displayName": "Users and groups that are denied access to this computer from the network",
          "description": "Specifies which users or groups are explicitly prohibited from connecting to the computer across the network."
        }
      },
      "UsersOrGroupsThatMayManageAuditingAndSecurityLog-e068b215-0026-4354-b347-8fb2766f73a2": {
        "type": "string",
        "defaultValue": "Administrators",
        "metadata": {
          "displayName": "Users or groups that may manage auditing and security log",
          "description": "Specifies users and groups permitted to change the auditing options for files and directories and clear the Security log."
        }
      },
      "UsersOrGroupsThatMayBackUpFilesAndDirectories-e068b215-0026-4354-b347-8fb2766f73a2": {
        "type": "string",
        "defaultValue": "Administrators, Backup Operators",
        "metadata": {
          "displayName": "Users or groups that may back up files and directories",
          "description": "Specifies users and groups allowed to circumvent file and directory permissions to back up the system."
        }
      },
      "UsersOrGroupsThatMayChangeTheSystemTime-e068b215-0026-4354-b347-8fb2766f73a2": {
        "type": "string",
        "defaultValue": "Administrators, LOCAL SERVICE",
        "metadata": {
          "displayName": "Users or groups that may change the system time",
          "description": "Specifies which users and groups are permitted to change the time and date on the internal clock of the computer."
        }
      },
      "UsersOrGroupsThatMayChangeTheTimeZone-e068b215-0026-4354-b347-8fb2766f73a2": {
        "type": "string",
        "defaultValue": "Administrators, LOCAL SERVICE",
        "metadata": {
          "displayName": "Users or groups that may change the time zone",
          "description": "Specifies which users and groups are permitted to change the time zone of the computer."
        }
      },
      "UsersOrGroupsThatMayCreateATokenObject-e068b215-0026-4354-b347-8fb2766f73a2": {
        "type": "string",
        "defaultValue": "No One",
        "metadata": {
          "displayName": "Users or groups that may create a token object",
          "description": "Specifies which users and groups are permitted to create an access token, which may provide elevated rights to access sensitive data."
        }
      },
      "UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob-e068b215-0026-4354-b347-8fb2766f73a2": {
        "type": "string",
        "defaultValue": "Guests",
        "metadata": {
          "displayName": "Users and groups that are denied logging on as a batch job",
          "description": "Specifies which users and groups are explicitly not permitted to log on to the computer as a batch job (i.e. scheduled task)."
        }
      },
      "UsersAndGroupsThatAreDeniedLoggingOnAsAService-e068b215-0026-4354-b347-8fb2766f73a2": {
        "type": "string",
        "defaultValue": "Guests",
        "metadata": {
          "displayName": "Users and groups that are denied logging on as a service",
          "description": "Specifies which service accounts are explicitly not permitted to register a process as a service."
        }
      },
      "UsersAndGroupsThatAreDeniedLocalLogon-e068b215-0026-4354-b347-8fb2766f73a2": {
        "type": "string",
        "defaultValue": "Guests",
        "metadata": {
          "displayName": "Users and groups that are denied local logon",
          "description": "Specifies which users and groups are explicitly not permitted to log on to the computer."
        }
      },
      "UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices-e068b215-0026-4354-b347-8fb2766f73a2": {
        "type": "string",
        "defaultValue": "Guests",
        "metadata": {
          "displayName": "Users and groups that are denied log on through Remote Desktop Services",
          "description": "Specifies which users and groups are explicitly not permitted to log on to the computer via Terminal Services/Remote Desktop Client."
        }
      },
      "UserAndGroupsThatMayForceShutdownFromARemoteSystem-e068b215-0026-4354-b347-8fb2766f73a2": {
        "type": "string",
        "defaultValue": "Administrators",
        "metadata": {
          "displayName": "User and groups that may force shutdown from a remote system",
          "description": "Specifies which users and groups are permitted to shut down the computer from a remote location on the network."
        }
      },
      "UsersAndGroupsThatMayRestoreFilesAndDirectories-e068b215-0026-4354-b347-8fb2766f73a2": {
        "type": "string",
        "defaultValue": "Administrators, Backup Operators",
        "metadata": {
          "displayName": "Users and groups that may restore files and directories",
          "description": "Specifies which users and groups are permitted to bypass file, directory, registry, and other persistent object permissions when restoring backed up files and directories."
        }
      },
      "UsersAndGroupsThatMayShutDownTheSystem-e068b215-0026-4354-b347-8fb2766f73a2": {
        "type": "string",
        "defaultValue": "Administrators",
        "metadata": {
          "displayName": "Users and groups that may shut down the system",
          "description": "Specifies which users and groups who are logged on locally to the computers in your environment are permitted to shut down the operating system with the Shut Down command."
        }
      },
      "UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects-e068b215-0026-4354-b347-8fb2766f73a2": {
        "type": "string",
        "defaultValue": "Administrators",
        "metadata": {
          "displayName": "Users or groups that may take ownership of files or other objects",
          "description": "Specifies which users and groups are permitted to take ownership of files, folders, registry keys, processes, or threads. This user right bypasses any permissions that are in place to protect objects to give ownership to the specified user."
        }
      },
      "effect-e068b215-0026-4354-b347-8fb2766f73a2": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-d26f7642-7545-4e18-9b75-8c9bbdee3a9a": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-d416745a-506c-48b6-8ab1-83cb814bcaa3": {
        "type": "string",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "virtualNetworkId-d416745a-506c-48b6-8ab1-83cb814bcaa3": {
        "type": "string",
        "metadata": {
          "displayName": "Virtual network Id",
          "description": "Resource Id of the virtual network. Example: /subscriptions/YourSubscriptionId/resourceGroups/YourResourceGroupName/providers/Microsoft.Network/virtualNetworks/Name"
        }
      },
      "effect-ae89ebca-1c92-4898-ac2c-9f63decb045c": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "IncludeArcMachines-492a29ed-d143-4f03-b6a4-705ce081b463": {
        "type": "string",
        "defaultValue": "false",
        "allowedValues": [
          "true",
          "false"
        ],
        "metadata": {
          "displayName": "Include Arc connected servers",
          "description": "By selecting this option, you agree to be charged monthly per Arc connected machine.",
          "portalReview": "true"
        }
      },
      "UACAdminApprovalModeForTheBuiltinAdministratorAccount-492a29ed-d143-4f03-b6a4-705ce081b463": {
        "type": "string",
        "defaultValue": "1",
        "metadata": {
          "displayName": "UAC: Admin Approval Mode for the Built-in Administrator account",
          "description": "Specifies the behavior of Admin Approval Mode for the built-in Administrator account."
        }
      },
      "UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode-492a29ed-d143-4f03-b6a4-705ce081b463": {
        "type": "string",
        "defaultValue": "2",
        "metadata": {
          "displayName": "UAC: Behavior of the elevation prompt for administrators in Admin Approval Mode",
          "description": "Specifies the behavior of the elevation prompt for administrators."
        }
      },
      "UACDetectApplicationInstallationsAndPromptForElevation-492a29ed-d143-4f03-b6a4-705ce081b463": {
        "type": "string",
        "defaultValue": "1",
        "metadata": {
          "displayName": "UAC: Detect application installations and prompt for elevation",
          "description": "Specifies the behavior of application installation detection for the computer."
        }
      },
      "UACRunAllAdministratorsInAdminApprovalMode-492a29ed-d143-4f03-b6a4-705ce081b463": {
        "type": "string",
        "defaultValue": "1",
        "metadata": {
          "displayName": "UAC: Run all administrators in Admin Approval Mode",
          "description": "Specifies the behavior of all User Account Control (UAC) policy settings for the computer."
        }
      },
      "effect-492a29ed-d143-4f03-b6a4-705ce081b463": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "IncludeArcMachines-35d9882c-993d-44e6-87d2-db66ce21b636": {
        "type": "string",
        "defaultValue": "false",
        "allowedValues": [
          "true",
          "false"
        ],
        "metadata": {
          "displayName": "Include Arc connected servers",
          "description": "By selecting this option, you agree to be charged monthly per Arc connected machine.",
          "portalReview": "true"
        }
      },
      "WindowsFirewallDomainUseProfileSettings-35d9882c-993d-44e6-87d2-db66ce21b636": {
        "type": "string",
        "defaultValue": "1",
        "metadata": {
          "displayName": "Windows Firewall (Domain): Use profile settings",
          "description": "Specifies whether Windows Firewall with Advanced Security uses the settings for the Domain profile to filter network traffic. If you select Off, Windows Firewall with Advanced Security will not use any of the firewall rules or connection security rules for this profile."
        }
      },
      "WindowsFirewallDomainBehaviorForOutboundConnections-35d9882c-993d-44e6-87d2-db66ce21b636": {
        "type": "string",
        "defaultValue": "0",
        "metadata": {
          "displayName": "Windows Firewall (Domain): Behavior for outbound connections",
          "description": "Specifies the behavior for outbound connections for the Domain profile that do not match an outbound firewall rule. The default value of 0 means to allow connections, and a value of 1 means to block connections."
        }
      },
      "WindowsFirewallDomainApplyLocalConnectionSecurityRules-35d9882c-993d-44e6-87d2-db66ce21b636": {
        "type": "string",
        "defaultValue": "1",
        "metadata": {
          "displayName": "Windows Firewall (Domain): Apply local connection security rules",
          "description": "Specifies whether local administrators are allowed to create connection security rules that apply together with connection security rules configured by Group Policy for the Domain profile."
        }
      },
      "WindowsFirewallDomainApplyLocalFirewallRules-35d9882c-993d-44e6-87d2-db66ce21b636": {
        "type": "string",
        "defaultValue": "1",
        "metadata": {
          "displayName": "Windows Firewall (Domain): Apply local firewall rules",
          "description": "Specifies whether local administrators are allowed to create local firewall rules that apply together with firewall rules configured by Group Policy for the Domain profile."
        }
      },
      "WindowsFirewallDomainDisplayNotifications-35d9882c-993d-44e6-87d2-db66ce21b636": {
        "type": "string",
        "defaultValue": "1",
        "metadata": {
          "displayName": "Windows Firewall (Domain): Display notifications",
          "description": "Specifies whether Windows Firewall with Advanced Security displays notifications to the user when a program is blocked from receiving inbound connections, for the Domain profile."
        }
      },
      "WindowsFirewallPrivateUseProfileSettings-35d9882c-993d-44e6-87d2-db66ce21b636": {
        "type": "string",
        "defaultValue": "1",
        "metadata": {
          "displayName": "Windows Firewall (Private): Use profile settings",
          "description": "Specifies whether Windows Firewall with Advanced Security uses the settings for the Private profile to filter network traffic. If you select Off, Windows Firewall with Advanced Security will not use any of the firewall rules or connection security rules for this profile."
        }
      },
      "WindowsFirewallPrivateBehaviorForOutboundConnections-35d9882c-993d-44e6-87d2-db66ce21b636": {
        "type": "string",
        "defaultValue": "0",
        "metadata": {
          "displayName": "Windows Firewall (Private): Behavior for outbound connections",
          "description": "Specifies the behavior for outbound connections for the Private profile that do not match an outbound firewall rule. The default value of 0 means to allow connections, and a value of 1 means to block connections."
        }
      },
      "WindowsFirewallPrivateApplyLocalConnectionSecurityRules-35d9882c-993d-44e6-87d2-db66ce21b636": {
        "type": "string",
        "defaultValue": "1",
        "metadata": {
          "displayName": "Windows Firewall (Private): Apply local connection security rules",
          "description": "Specifies whether local administrators are allowed to create connection security rules that apply together with connection security rules configured by Group Policy for the Private profile."
        }
      },
      "WindowsFirewallPrivateApplyLocalFirewallRules-35d9882c-993d-44e6-87d2-db66ce21b636": {
        "type": "string",
        "defaultValue": "1",
        "metadata": {
          "displayName": "Windows Firewall (Private): Apply local firewall rules",
          "description": "Specifies whether local administrators are allowed to create local firewall rules that apply together with firewall rules configured by Group Policy for the Private profile."
        }
      },
      "WindowsFirewallPrivateDisplayNotifications-35d9882c-993d-44e6-87d2-db66ce21b636": {
        "type": "string",
        "defaultValue": "1",
        "metadata": {
          "displayName": "Windows Firewall (Private): Display notifications",
          "description": "Specifies whether Windows Firewall with Advanced Security displays notifications to the user when a program is blocked from receiving inbound connections, for the Private profile."
        }
      },
      "WindowsFirewallPublicUseProfileSettings-35d9882c-993d-44e6-87d2-db66ce21b636": {
        "type": "string",
        "defaultValue": "1",
        "metadata": {
          "displayName": "Windows Firewall (Public): Use profile settings",
          "description": "Specifies whether Windows Firewall with Advanced Security uses the settings for the Public profile to filter network traffic. If you select Off, Windows Firewall with Advanced Security will not use any of the firewall rules or connection security rules for this profile."
        }
      },
      "WindowsFirewallPublicBehaviorForOutboundConnections-35d9882c-993d-44e6-87d2-db66ce21b636": {
        "type": "string",
        "defaultValue": "0",
        "metadata": {
          "displayName": "Windows Firewall (Public): Behavior for outbound connections",
          "description": "Specifies the behavior for outbound connections for the Public profile that do not match an outbound firewall rule. The default value of 0 means to allow connections, and a value of 1 means to block connections."
        }
      },
      "WindowsFirewallPublicApplyLocalConnectionSecurityRules-35d9882c-993d-44e6-87d2-db66ce21b636": {
        "type": "string",
        "defaultValue": "1",
        "metadata": {
          "displayName": "Windows Firewall (Public): Apply local connection security rules",
          "description": "Specifies whether local administrators are allowed to create connection security rules that apply together with connection security rules configured by Group Policy for the Public profile."
        }
      },
      "WindowsFirewallPublicApplyLocalFirewallRules-35d9882c-993d-44e6-87d2-db66ce21b636": {
        "type": "string",
        "defaultValue": "1",
        "metadata": {
          "displayName": "Windows Firewall (Public): Apply local firewall rules",
          "description": "Specifies whether local administrators are allowed to create local firewall rules that apply together with firewall rules configured by Group Policy for the Public profile."
        }
      },
      "WindowsFirewallPublicDisplayNotifications-35d9882c-993d-44e6-87d2-db66ce21b636": {
        "type": "string",
        "defaultValue": "1",
        "metadata": {
          "displayName": "Windows Firewall (Public): Display notifications",
          "description": "Specifies whether Windows Firewall with Advanced Security displays notifications to the user when a program is blocked from receiving inbound connections, for the Public profile."
        }
      },
      "WindowsFirewallDomainAllowUnicastResponse-35d9882c-993d-44e6-87d2-db66ce21b636": {
        "type": "string",
        "defaultValue": "0",
        "metadata": {
          "displayName": "Windows Firewall: Domain: Allow unicast response",
          "description": "Specifies whether Windows Firewall with Advanced Security permits the local computer to receive unicast responses to its outgoing multicast or broadcast messages; for the Domain profile."
        }
      },
      "WindowsFirewallPrivateAllowUnicastResponse-35d9882c-993d-44e6-87d2-db66ce21b636": {
        "type": "string",
        "defaultValue": "0",
        "metadata": {
          "displayName": "Windows Firewall: Private: Allow unicast response",
          "description": "Specifies whether Windows Firewall with Advanced Security permits the local computer to receive unicast responses to its outgoing multicast or broadcast messages; for the Private profile."
        }
      },
      "WindowsFirewallPublicAllowUnicastResponse-35d9882c-993d-44e6-87d2-db66ce21b636": {
        "type": "string",
        "defaultValue": "1",
        "metadata": {
          "displayName": "Windows Firewall: Public: Allow unicast response",
          "description": "Specifies whether Windows Firewall with Advanced Security permits the local computer to receive unicast responses to its outgoing multicast or broadcast messages; for the Public profile."
        }
      },
      "effect-35d9882c-993d-44e6-87d2-db66ce21b636": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-4f4f78b8-e367-4b10-a341-d9a4ad5cf1c7": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "source-47a1ee2f-2a2a-4576-bf2a-e0e36709c2b8": {
        "type": "String",
        "defaultValue": "Original",
        "allowedValues": [
          "All",
          "Generated",
          "Original"
        ],
        "metadata": {
          "displayName": "Source",
          "description": "The source k8s object for constraint evaluation. 'Original' means only evaluate against the specific GroupVersionKind specified in the policy definition. 'Generated' means only evaluate against k8s objects generated by Gatekeeper ExpansionTemplates. 'All' means evaluate against both the original object and any generated ones."
        }
      },
      "warn-47a1ee2f-2a2a-4576-bf2a-e0e36709c2b8": {
        "type": "Boolean",
        "defaultValue": false,
        "metadata": {
          "displayName": "Warn",
          "description": "Whether or not to return warnings back to the user in the kubectl cli"
        }
      },
      "effect-47a1ee2f-2a2a-4576-bf2a-e0e36709c2b8": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "excludedNamespaces-47a1ee2f-2a2a-4576-bf2a-e0e36709c2b8": {
        "type": "Array",
        "defaultValue": [
          "kube-system",
          "gatekeeper-system",
          "azure-arc",
          "azure-extensions-usage-system"
        ],
        "metadata": {
          "displayName": "Namespace exclusions",
          "description": "List of Kubernetes namespaces to exclude from policy evaluation. System namespaces \"kube-system\", \"gatekeeper-system\" and \"azure-arc\" are always excluded by design. \"azure-extensions-usage-system\" is optional to remove."
        }
      },
      "namespaces-47a1ee2f-2a2a-4576-bf2a-e0e36709c2b8": {
        "type": "Array",
        "defaultValue": [],
        "metadata": {
          "displayName": "Namespace inclusions",
          "description": "List of Kubernetes namespaces to only include in policy evaluation. An empty list means the policy is applied to all resources in all namespaces."
        }
      },
      "labelSelector-47a1ee2f-2a2a-4576-bf2a-e0e36709c2b8": {
        "type": "object",
        "defaultValue": {},
        "metadata": {
          "displayName": "Kubernetes label selector",
          "description": "Label query to select Kubernetes resources for policy evaluation. An empty label selector matches all Kubernetes resources."
        }
      },
      "excludedImages-47a1ee2f-2a2a-4576-bf2a-e0e36709c2b8": {
        "type": "Array",
        "defaultValue": [],
        "metadata": {
          "displayName": "Image exclusions",
          "description": "The list of InitContainers and Containers to exclude from policy evaluation. The identifier is the image of container. Prefix-matching can be signified with `*`. For example: `myregistry.azurecr.io/istio:*`. It is recommended that users use the fully-qualified Docker image name (e.g. start with a domain name) in order to avoid unexpectedly exempting images from an untrusted repository.",
          "portalReview": true
        }
      },
      "effect-c5447c04-a4d7-4ba8-a263-c9ee321a6858": {
        "type": "String",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "operationName-c5447c04-a4d7-4ba8-a263-c9ee321a6858": {
        "type": "String",
        "allowedValues": [
          "Microsoft.Authorization/policyAssignments/write",
          "Microsoft.Authorization/policyAssignments/delete"
        ],
        "metadata": {
          "displayName": "Operation Name",
          "description": "Policy Operation name for which activity log alert should exist"
        }
      },
      "IncludeArcMachines-f2143251-70de-4e81-87a8-36cee5a2f29d": {
        "type": "string",
        "defaultValue": "false",
        "allowedValues": [
          "true",
          "false"
        ],
        "metadata": {
          "displayName": "Include Arc connected servers",
          "description": "By selecting this option, you agree to be charged monthly per Arc connected machine.",
          "portalReview": "true"
        }
      },
      "EnforcePasswordHistory-f2143251-70de-4e81-87a8-36cee5a2f29d": {
        "type": "string",
        "defaultValue": "24",
        "metadata": {
          "displayName": "Enforce password history",
          "description": "Specifies limits on password reuse - how many times a new password must be created for a user account before the password can be repeated."
        }
      },
      "MaximumPasswordAge-f2143251-70de-4e81-87a8-36cee5a2f29d": {
        "type": "string",
        "defaultValue": "1,70",
        "metadata": {
          "displayName": "Maximum password age",
          "description": "Specifies the maximum number of days that may elapse before a user account password must be changed. The format of the value is two integers separated by a comma, denoting an inclusive range."
        }
      },
      "MinimumPasswordAge-f2143251-70de-4e81-87a8-36cee5a2f29d": {
        "type": "string",
        "defaultValue": "1",
        "metadata": {
          "displayName": "Minimum password age",
          "description": "Specifies the minimum number of days that must elapse before a user account password can be changed."
        }
      },
      "MinimumPasswordLength-f2143251-70de-4e81-87a8-36cee5a2f29d": {
        "type": "string",
        "defaultValue": "14",
        "metadata": {
          "displayName": "Minimum password length",
          "description": "Specifies the minimum number of characters that a user account password may contain."
        }
      },
      "PasswordMustMeetComplexityRequirements-f2143251-70de-4e81-87a8-36cee5a2f29d": {
        "type": "string",
        "defaultValue": "1",
        "metadata": {
          "displayName": "Password must meet complexity requirements",
          "description": "Specifies whether a user account password must be complex. If required, a complex password must not contain part of  user's account name or full name; be at least 6 characters long; contain a mix of uppercase, lowercase, number, and non-alphabetic characters."
        }
      },
      "effect-f2143251-70de-4e81-87a8-36cee5a2f29d": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-146412e9-005c-472b-9e48-c87b72ac229e": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "IncludeArcMachines-72650e9f-97bc-4b2a-ab5f-9781a9fcecbc": {
        "type": "string",
        "defaultValue": "false",
        "allowedValues": [
          "true",
          "false"
        ],
        "metadata": {
          "displayName": "Include Arc connected servers",
          "description": "By selecting this option, you agree to be charged monthly per Arc connected machine.",
          "portalReview": "true"
        }
      },
      "effect-72650e9f-97bc-4b2a-ab5f-9781a9fcecbc": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-8ac833bd-f505-48d5-887e-c993a1d3eea0": {
        "type": "String",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-7926a6d1-b268-4586-8197-e8ae90c877d7": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-12d4fa5e-1f9f-4c21-97a9-b99b3c6611b5": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "IncludeArcMachines-58383b73-94a9-4414-b382-4146eb02611b": {
        "type": "string",
        "defaultValue": "false",
        "allowedValues": [
          "true",
          "false"
        ],
        "metadata": {
          "displayName": "Include Arc connected servers",
          "description": "By selecting this option, you agree to be charged monthly per Arc connected machine.",
          "portalReview": "true"
        }
      },
      "AuditProcessTermination-58383b73-94a9-4414-b382-4146eb02611b": {
        "type": "string",
        "defaultValue": "No Auditing",
        "allowedValues": [
          "No Auditing",
          "Success",
          "Failure",
          "Success and Failure"
        ],
        "metadata": {
          "displayName": "Audit Process Termination",
          "description": "Specifies whether audit events are generated when a process has exited. Recommended for monitoring termination of critical processes."
        }
      },
      "effect-58383b73-94a9-4414-b382-4146eb02611b": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "listOfImageIdToInclude_windows-32133ab0-ee4b-4b44-98d6-042180979d50": {
        "type": "Array",
        "defaultValue": [],
        "metadata": {
          "displayName": "Optional: List of virtual machine images that have supported Windows OS to add to scope",
          "description": "Example value: '/subscriptions/<subscriptionId>/resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'"
        }
      },
      "listOfImageIdToInclude_linux-32133ab0-ee4b-4b44-98d6-042180979d50": {
        "type": "Array",
        "defaultValue": [],
        "metadata": {
          "displayName": "Optional: List of virtual machine images that have supported Linux OS to add to scope",
          "description": "Example value: '/subscriptions/<subscriptionId>/resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'"
        }
      },
      "effect-32133ab0-ee4b-4b44-98d6-042180979d50": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-95bccee9-a7f8-4bec-9ee9-62c3473701fc": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-13a6c84f-49a5-410a-b5df-5b880c3fe009": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-d31e5c31-63b2-4f12-887b-e49456834fa1": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-b4dec045-250a-48c2-b5cc-e0c4eec8b5b4": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-0a9fbe0d-c5c4-4da8-87d8-f4fd77338835": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-22730e10-96f6-4aac-ad84-9383d35b5917": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-d38668f5-d155-42c7-ab3d-9b57b50f8fbf": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-abda6d70-9778-44e7-84a8-06713e6db027": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "listOfImageIdToInclude_windows-5c3bc7b8-a64c-4e08-a9cd-7ff0f31e1138": {
        "type": "Array",
        "defaultValue": [],
        "metadata": {
          "displayName": "Optional: List of virtual machine images that have supported Windows OS to add to scope",
          "description": "Example value: '/subscriptions/<subscriptionId>/resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'"
        }
      },
      "listOfImageIdToInclude_linux-5c3bc7b8-a64c-4e08-a9cd-7ff0f31e1138": {
        "type": "Array",
        "defaultValue": [],
        "metadata": {
          "displayName": "Optional: List of virtual machine images that have supported Linux OS to add to scope",
          "description": "Example value: '/subscriptions/<subscriptionId>/resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'"
        }
      },
      "effect-5c3bc7b8-a64c-4e08-a9cd-7ff0f31e1138": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-e1e5fd5d-3e4c-4ce1-8661-7d1873ae6b15": {
        "type": "string",
        "defaultValue": "Disabled",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects",
          "deprecated": true
        }
      },
      "effect-b954148f-4c11-4c38-8221-be76711e194a": {
        "type": "String",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "operationName-b954148f-4c11-4c38-8221-be76711e194a": {
        "type": "String",
        "allowedValues": [
          "Microsoft.Sql/servers/firewallRules/write",
          "Microsoft.Sql/servers/firewallRules/delete",
          "Microsoft.Network/networkSecurityGroups/write",
          "Microsoft.Network/networkSecurityGroups/delete",
          "Microsoft.ClassicNetwork/networkSecurityGroups/write",
          "Microsoft.ClassicNetwork/networkSecurityGroups/delete",
          "Microsoft.Network/networkSecurityGroups/securityRules/write",
          "Microsoft.Network/networkSecurityGroups/securityRules/delete",
          "Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write",
          "Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/delete"
        ],
        "metadata": {
          "displayName": "Operation Name",
          "description": "Administrative Operation name for which activity log alert should be configured"
        }
      },
      "effect-bfecdea6-31c4-4045-ad42-71b9dc87247d": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-19dd1db6-f442-49cf-a838-b0786b4401ef": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "IncludeArcMachines-ee984370-154a-4ee8-9726-19d900e56fc0": {
        "type": "string",
        "defaultValue": "false",
        "allowedValues": [
          "true",
          "false"
        ],
        "metadata": {
          "displayName": "Include Arc connected servers",
          "description": "By selecting this option, you agree to be charged monthly per Arc connected machine.",
          "portalReview": "true"
        }
      },
      "AccountsGuestAccountStatus-ee984370-154a-4ee8-9726-19d900e56fc0": {
        "type": "string",
        "defaultValue": "0",
        "metadata": {
          "displayName": "Accounts: Guest account status",
          "description": "Specifies whether the local Guest account is disabled."
        }
      },
      "effect-ee984370-154a-4ee8-9726-19d900e56fc0": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-78215662-041e-49ed-a9dd-5385911b3a1f": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-df73bd95-24da-4a4f-96b9-4e8b94b402bd": {
        "type": "String",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "endpointType-df73bd95-24da-4a4f-96b9-4e8b94b402bd": {
        "type": "String",
        "defaultValue": "Management",
        "allowedValues": [
          "Management",
          "Git",
          "Gateway Configuration"
        ],
        "metadata": {
          "displayName": "Public Endpoint Type",
          "description": "Public Endpoint Type for which to enforce the access check"
        }
      },
      "effect-1c988dd6-ade4-430f-a608-2a3e5b0a6d38": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-d550e854-df1a-4de9-bf44-cd894b39a95e": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-672fe5a1-2fcd-42d7-b85d-902b6e28c6ff": {
        "type": "string",
        "defaultValue": "AuditIfNotExists",
        "allowedValues": [
          "AuditIfNotExists",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "IncludeArcMachines-30f71ea1-ac77-4f26-9fc5-2d926bbd4ba7": {
        "type": "string",
        "defaultValue": "false",
        "allowedValues": [
          "true",
          "false"
        ],
        "metadata": {
          "displayName": "Include Arc connected servers",
          "description": "By selecting this option, you agree to be charged monthly per Arc connected machine.",
          "portalReview": "true"
        }
      },
      "MembersToInclude-30f71ea1-ac77-4f26-9fc5-2d926bbd4ba7": {
        "type": "string",
        "metadata": {
          "displayName": "Members to include",
          "description": "A semicolon-separated list of members that should be included in the Administrators local group. Ex: Administrator; myUser1; myUser2"
        }
      },
      "effect-5d4e3c65-4873-47be-94f3-6f8b953a3598": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-6c53d030-cc64-46f0-906d-2bc061cd1334": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-21a6bc25-125e-4d13-b82d-2e19b7208ab7": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "effect-1bc02227-0cb6-4e11-8f53-eb0b22eab7e8": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "maximumValidityInMonths-0a075868-4c26-42ef-914c-5bc007359560": {
        "type": "Integer",
        "defaultValue": 12,
        "metadata": {
          "displayName": "The maximum validity in months",
          "description": "The limit to how long a certificate may be valid for. Certificates with lengthy validity periods aren't best practice."
        }
      },
      "effect-0a075868-4c26-42ef-914c-5bc007359560": {
        "type": "string",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "source-9f061a12-e40d-4183-a00e-171812443373": {
        "type": "String",
        "defaultValue": "Original",
        "allowedValues": [
          "All",
          "Generated",
          "Original"
        ],
        "metadata": {
          "displayName": "Source",
          "description": "The source k8s object for constraint evaluation. 'Original' means only evaluate against the specific GroupVersionKind specified in the policy definition. 'Generated' means only evaluate against k8s objects generated by Gatekeeper ExpansionTemplates. 'All' means evaluate against both the original object and any generated ones."
        }
      },
      "warn-9f061a12-e40d-4183-a00e-171812443373": {
        "type": "Boolean",
        "defaultValue": false,
        "metadata": {
          "displayName": "Warn",
          "description": "Whether or not to return warnings back to the user in the kubectl cli"
        }
      },
      "effect-9f061a12-e40d-4183-a00e-171812443373": {
        "type": "String",
        "defaultValue": "Audit",
        "allowedValues": [
          "Audit",
          "Deny",
          "Disabled"
        ],
        "metadata": {
          "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)",
          "description": "For more information about effects, visit https://aka.ms/policyeffects"
        }
      },
      "excludedNamespaces-9f061a12-e40d-4183-a00e-171812443373": {
        "type": "Array",
        "defaultValue": [
          "kube-system",
          "gatekeeper-system",
          "azure-arc",
          "azure-extensions-usage-system"
        ],
        "metadata": {
          "displayName": "Namespace exclusions",
          "description": "List of Kubernetes namespaces to exclude from policy evaluation. System namespaces \"kube-system\", \"gatekeeper-system\" and \"azure-arc\" are always excluded by design. \"azure-extensions-usage-system\" is optional to remove."
        }
      },
      "namespaces-9f061a12-e40d-4183-a00e-171812443373": {
        "type": "Array",
        "defaultValue": [
          "default"
        ],
        "metadata": {
          "displayName": "Namespace inclusions",
          "description": "List of Kubernetes namespaces to only include in policy evaluation. An empty list means the policy is applied to all resources in all namespaces."
        }
      },
      "labelSelector-9f061a12-e40d-4183-a00e-171812443373": {
        "type": "object",
        "defaultValue": {},
        "metadata": {
          "displayName": "Kubernetes label selector",
          "description": "Label query to select Kubernetes resources for policy evaluation. An empty label selector matches all Kubernetes resources."
        }
      }
    },
    "policyDefinitions": [
      {
        "policyDefinitionReferenceId": "ea53dbee-c6c9-4f0e-9f9e-de0039b78023",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ea53dbee-c6c9-4f0e-9f9e-de0039b78023",
        "definitionVersion": "3.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_B2.a",
          "UK_NCSC_CAF_v3.2_B4.b"
        ],
        "parameters": {
          "IncludeArcMachines": {
            "value": "[parameters('IncludeArcMachines-ea53dbee-c6c9-4f0e-9f9e-de0039b78023')]"
          },
          "effect": {
            "value": "[parameters('effect-ea53dbee-c6c9-4f0e-9f9e-de0039b78023')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "3b980d31-7904-4bb7-8575-5665739a8052",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3b980d31-7904-4bb7-8575-5665739a8052",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_B4.b",
          "UK_NCSC_CAF_v3.2_C1.c",
          "UK_NCSC_CAF_v3.2_C1.d"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-3b980d31-7904-4bb7-8575-5665739a8052')]"
          },
          "operationName": {
            "value": "[parameters('operationName-3b980d31-7904-4bb7-8575-5665739a8052')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "c251913d-7d24-4958-af87-478ed3b9ba41",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c251913d-7d24-4958-af87-478ed3b9ba41",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_B4.b",
          "UK_NCSC_CAF_v3.2_C",
          "UK_NCSC_CAF_v3.2_C1",
          "UK_NCSC_CAF_v3.2_C1.c",
          "UK_NCSC_CAF_v3.2_C1.d",
          "UK_NCSC_CAF_v3.2_C2",
          "UK_NCSC_CAF_v3.2_C2.b"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-c251913d-7d24-4958-af87-478ed3b9ba41')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "47031206-ce96-41f8-861b-6a915f3de284",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/47031206-ce96-41f8-861b-6a915f3de284",
        "definitionVersion": "1.*.*-preview",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_C1.b"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-47031206-ce96-41f8-861b-6a915f3de284')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "6b2122c1-8120-4ff5-801b-17625a355590",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6b2122c1-8120-4ff5-801b-17625a355590",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_B4.b"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-6b2122c1-8120-4ff5-801b-17625a355590')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "055aa869-bc98-4af8-bafc-23f1ab6ffe2c",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/055aa869-bc98-4af8-bafc-23f1ab6ffe2c",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_C1",
          "UK_NCSC_CAF_v3.2_C2",
          "UK_NCSC_CAF_v3.2_C2.b"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-055aa869-bc98-4af8-bafc-23f1ab6ffe2c')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "a1181c5f-672a-477a-979a-7d58aa086233",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a1181c5f-672a-477a-979a-7d58aa086233",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_C",
          "UK_NCSC_CAF_v3.2_C1",
          "UK_NCSC_CAF_v3.2_C1.c",
          "UK_NCSC_CAF_v3.2_C1.d",
          "UK_NCSC_CAF_v3.2_C2",
          "UK_NCSC_CAF_v3.2_C2.b"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-a1181c5f-672a-477a-979a-7d58aa086233')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "3e596b57-105f-48a6-be97-03e9243bad6e",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3e596b57-105f-48a6-be97-03e9243bad6e",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_C",
          "UK_NCSC_CAF_v3.2_C1",
          "UK_NCSC_CAF_v3.2_C1.c",
          "UK_NCSC_CAF_v3.2_C1.d",
          "UK_NCSC_CAF_v3.2_C2",
          "UK_NCSC_CAF_v3.2_C2.b"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-3e596b57-105f-48a6-be97-03e9243bad6e')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "3dc5edcd-002d-444c-b216-e123bbfa37c0",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3dc5edcd-002d-444c-b216-e123bbfa37c0",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_C1.b"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-3dc5edcd-002d-444c-b216-e123bbfa37c0')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "c26596ff-4d70-4e6a-9a30-c2506bd2f80c",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c26596ff-4d70-4e6a-9a30-c2506bd2f80c",
        "definitionVersion": "6.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_C",
          "UK_NCSC_CAF_v3.2_C1",
          "UK_NCSC_CAF_v3.2_C1.c",
          "UK_NCSC_CAF_v3.2_C1.d",
          "UK_NCSC_CAF_v3.2_C2",
          "UK_NCSC_CAF_v3.2_C2.b"
        ],
        "parameters": {
          "source": {
            "value": "[parameters('source-c26596ff-4d70-4e6a-9a30-c2506bd2f80c')]"
          },
          "warn": {
            "value": "[parameters('warn-c26596ff-4d70-4e6a-9a30-c2506bd2f80c')]"
          },
          "effect": {
            "value": "[parameters('effect-c26596ff-4d70-4e6a-9a30-c2506bd2f80c')]"
          },
          "excludedNamespaces": {
            "value": "[parameters('excludedNamespaces-c26596ff-4d70-4e6a-9a30-c2506bd2f80c')]"
          },
          "namespaces": {
            "value": "[parameters('namespaces-c26596ff-4d70-4e6a-9a30-c2506bd2f80c')]"
          },
          "labelSelector": {
            "value": "[parameters('labelSelector-c26596ff-4d70-4e6a-9a30-c2506bd2f80c')]"
          },
          "allowedCapabilities": {
            "value": "[parameters('allowedCapabilities-c26596ff-4d70-4e6a-9a30-c2506bd2f80c')]"
          },
          "requiredDropCapabilities": {
            "value": "[parameters('requiredDropCapabilities-c26596ff-4d70-4e6a-9a30-c2506bd2f80c')]"
          },
          "excludedContainers": {
            "value": "[parameters('excludedContainers-c26596ff-4d70-4e6a-9a30-c2506bd2f80c')]"
          },
          "excludedImages": {
            "value": "[parameters('excludedImages-c26596ff-4d70-4e6a-9a30-c2506bd2f80c')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "98728c90-32c7-4049-8429-847dc0f4fe37",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/98728c90-32c7-4049-8429-847dc0f4fe37",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_B2.a"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-98728c90-32c7-4049-8429-847dc0f4fe37')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "5450f5bd-9c72-4390-a9c4-a7aba4edfdd2",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5450f5bd-9c72-4390-a9c4-a7aba4edfdd2",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_B2.a",
          "UK_NCSC_CAF_v3.2_B4.b",
          "UK_NCSC_CAF_v3.2_C1.c"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-5450f5bd-9c72-4390-a9c4-a7aba4edfdd2')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "33936777-f2ac-45aa-82ec-07958ec9ade4",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/33936777-f2ac-45aa-82ec-07958ec9ade4",
        "definitionVersion": "3.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_B4.b"
        ],
        "parameters": {
          "IncludeArcMachines": {
            "value": "[parameters('IncludeArcMachines-33936777-f2ac-45aa-82ec-07958ec9ade4')]"
          },
          "AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits": {
            "value": "[parameters('AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits-33936777-f2ac-45aa-82ec-07958ec9ade4')]"
          },
          "effect": {
            "value": "[parameters('effect-33936777-f2ac-45aa-82ec-07958ec9ade4')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "152b15f7-8e1f-4c1f-ab71-8c010ba5dbc0",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/152b15f7-8e1f-4c1f-ab71-8c010ba5dbc0",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_B2.a",
          "UK_NCSC_CAF_v3.2_B4.b"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-152b15f7-8e1f-4c1f-ab71-8c010ba5dbc0')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "efbde977-ba53-4479-b8e9-10b957924fbf",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/efbde977-ba53-4479-b8e9-10b957924fbf",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_C",
          "UK_NCSC_CAF_v3.2_C1",
          "UK_NCSC_CAF_v3.2_C1.c",
          "UK_NCSC_CAF_v3.2_C1.d",
          "UK_NCSC_CAF_v3.2_C2",
          "UK_NCSC_CAF_v3.2_C2.b"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-efbde977-ba53-4479-b8e9-10b957924fbf')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "e6955644-301c-44b5-a4c4-528577de6861",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e6955644-301c-44b5-a4c4-528577de6861",
        "definitionVersion": "3.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_B4.b",
          "UK_NCSC_CAF_v3.2_B2.a"
        ],
        "parameters": {
          "IncludeArcMachines": {
            "value": "[parameters('IncludeArcMachines-e6955644-301c-44b5-a4c4-528577de6861')]"
          },
          "effect": {
            "value": "[parameters('effect-e6955644-301c-44b5-a4c4-528577de6861')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "0da106f2-4ca3-48e8-bc85-c638fe6aea8f",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0da106f2-4ca3-48e8-bc85-c638fe6aea8f",
        "definitionVersion": "3.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_B2.a",
          "UK_NCSC_CAF_v3.2_B4.b"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-0da106f2-4ca3-48e8-bc85-c638fe6aea8f')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "f4b53539-8df9-40e4-86c6-6b607703bd4e",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f4b53539-8df9-40e4-86c6-6b607703bd4e",
        "definitionVersion": "2.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_C1.b"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-f4b53539-8df9-40e4-86c6-6b607703bd4e')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "f71be03e-e25b-4d0f-b8bc-9b3e309b66c0",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f71be03e-e25b-4d0f-b8bc-9b3e309b66c0",
        "definitionVersion": "3.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_B3.d"
        ],
        "parameters": {
          "IncludeArcMachines": {
            "value": "[parameters('IncludeArcMachines-f71be03e-e25b-4d0f-b8bc-9b3e309b66c0')]"
          },
          "RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders": {
            "value": "[parameters('RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders-f71be03e-e25b-4d0f-b8bc-9b3e309b66c0')]"
          },
          "effect": {
            "value": "[parameters('effect-f71be03e-e25b-4d0f-b8bc-9b3e309b66c0')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "69bf4abd-ca1e-4cf6-8b5a-762d42e61d4f",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/69bf4abd-ca1e-4cf6-8b5a-762d42e61d4f",
        "definitionVersion": "2.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_B2.a",
          "UK_NCSC_CAF_v3.2_B4.b"
        ],
        "parameters": {
          "IncludeArcMachines": {
            "value": "[parameters('IncludeArcMachines-69bf4abd-ca1e-4cf6-8b5a-762d42e61d4f')]"
          },
          "MembersToExclude": {
            "value": "[parameters('MembersToExclude-69bf4abd-ca1e-4cf6-8b5a-762d42e61d4f')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "0015ea4d-51ff-4ce3-8d8c-f3f8f0179a56",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0015ea4d-51ff-4ce3-8d8c-f3f8f0179a56",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_D1"
        ],
        "parameters": {}
      },
      {
        "policyDefinitionReferenceId": "2158ddbe-fefa-408e-b43f-d4faef8ff3b8",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2158ddbe-fefa-408e-b43f-d4faef8ff3b8",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_B2.a"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-2158ddbe-fefa-408e-b43f-d4faef8ff3b8')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "6e2593d9-add6-4083-9c9b-4b7d2188c899",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6e2593d9-add6-4083-9c9b-4b7d2188c899",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_C",
          "UK_NCSC_CAF_v3.2_C1",
          "UK_NCSC_CAF_v3.2_C1.c",
          "UK_NCSC_CAF_v3.2_C1.d",
          "UK_NCSC_CAF_v3.2_C2",
          "UK_NCSC_CAF_v3.2_C2.b"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-6e2593d9-add6-4083-9c9b-4b7d2188c899')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "8c6a50c6-9ffd-4ae7-986f-5fa6111f9a54",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8c6a50c6-9ffd-4ae7-986f-5fa6111f9a54",
        "definitionVersion": "2.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_B2.a",
          "UK_NCSC_CAF_v3.2_B4.b"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-8c6a50c6-9ffd-4ae7-986f-5fa6111f9a54')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "3d2a3320-2a72-4c67-ac5f-caa40fbee2b2",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3d2a3320-2a72-4c67-ac5f-caa40fbee2b2",
        "definitionVersion": "2.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_B2.a",
          "UK_NCSC_CAF_v3.2_B4.b"
        ],
        "parameters": {
          "IncludeArcMachines": {
            "value": "[parameters('IncludeArcMachines-3d2a3320-2a72-4c67-ac5f-caa40fbee2b2')]"
          },
          "Members": {
            "value": "[parameters('Members-3d2a3320-2a72-4c67-ac5f-caa40fbee2b2')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "bf16e0bb-31e1-4646-8202-60a235cc7e74",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/bf16e0bb-31e1-4646-8202-60a235cc7e74",
        "definitionVersion": "2.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_B2.a",
          "UK_NCSC_CAF_v3.2_B4.b"
        ],
        "parameters": {
          "IncludeArcMachines": {
            "value": "[parameters('IncludeArcMachines-bf16e0bb-31e1-4646-8202-60a235cc7e74')]"
          },
          "effect": {
            "value": "[parameters('effect-bf16e0bb-31e1-4646-8202-60a235cc7e74')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "8dfab9c4-fe7b-49ad-85e4-1e9be085358f",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8dfab9c4-fe7b-49ad-85e4-1e9be085358f",
        "definitionVersion": "6.*.*-preview",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_C",
          "UK_NCSC_CAF_v3.2_C1",
          "UK_NCSC_CAF_v3.2_C1.c",
          "UK_NCSC_CAF_v3.2_C1.d",
          "UK_NCSC_CAF_v3.2_C2",
          "UK_NCSC_CAF_v3.2_C2.b"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-8dfab9c4-fe7b-49ad-85e4-1e9be085358f')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "46aa9b05-0e60-4eae-a88b-1e9d374fa515",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/46aa9b05-0e60-4eae-a88b-1e9d374fa515",
        "definitionVersion": "2.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_C1.b"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-46aa9b05-0e60-4eae-a88b-1e9d374fa515')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9",
        "definitionVersion": "2.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_C",
          "UK_NCSC_CAF_v3.2_C1",
          "UK_NCSC_CAF_v3.2_C1.c",
          "UK_NCSC_CAF_v3.2_C1.d",
          "UK_NCSC_CAF_v3.2_C2",
          "UK_NCSC_CAF_v3.2_C2.b"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "d461a302-a187-421a-89ac-84acdb4edc04",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d461a302-a187-421a-89ac-84acdb4edc04",
        "definitionVersion": "2.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_C1.b"
        ],
        "parameters": {
          "allowedEncryptionSets": {
            "value": "[parameters('allowedEncryptionSets-d461a302-a187-421a-89ac-84acdb4edc04')]"
          },
          "effect": {
            "value": "[parameters('effect-d461a302-a187-421a-89ac-84acdb4edc04')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "3bc8a0d5-38e0-4a3d-a657-2cb64468fc34",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3bc8a0d5-38e0-4a3d-a657-2cb64468fc34",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_C",
          "UK_NCSC_CAF_v3.2_C1",
          "UK_NCSC_CAF_v3.2_C1.c",
          "UK_NCSC_CAF_v3.2_C1.d",
          "UK_NCSC_CAF_v3.2_C2",
          "UK_NCSC_CAF_v3.2_C2.b"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-3bc8a0d5-38e0-4a3d-a657-2cb64468fc34')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "ca91455f-eace-4f96-be59-e6e2c35b4816",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ca91455f-eace-4f96-be59-e6e2c35b4816",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_C1.b"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-ca91455f-eace-4f96-be59-e6e2c35b4816')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "ab6a902f-9493-453b-928d-62c30b11b5a6",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ab6a902f-9493-453b-928d-62c30b11b5a6",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_B2.a"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-ab6a902f-9493-453b-928d-62c30b11b5a6')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "3d9f5e4c-9947-4579-9539-2a7695fbc187",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3d9f5e4c-9947-4579-9539-2a7695fbc187",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_B2.c"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-3d9f5e4c-9947-4579-9539-2a7695fbc187')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "e96a9a5f-07ca-471b-9bc5-6a0f33cbd68f",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e96a9a5f-07ca-471b-9bc5-6a0f33cbd68f",
        "definitionVersion": "2.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_B2.a",
          "UK_NCSC_CAF_v3.2_B4.b"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-e96a9a5f-07ca-471b-9bc5-6a0f33cbd68f')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "4ceb8dc2-559c-478b-a15b-733fbf1e3738",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4ceb8dc2-559c-478b-a15b-733fbf1e3738",
        "definitionVersion": "2.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_B2.a",
          "UK_NCSC_CAF_v3.2_B4.b"
        ],
        "parameters": {
          "IncludeArcMachines": {
            "value": "[parameters('IncludeArcMachines-4ceb8dc2-559c-478b-a15b-733fbf1e3738')]"
          },
          "MaximumPasswordAge": {
            "value": "[parameters('MaximumPasswordAge-4ceb8dc2-559c-478b-a15b-733fbf1e3738')]"
          },
          "effect": {
            "value": "[parameters('effect-4ceb8dc2-559c-478b-a15b-733fbf1e3738')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "f47b5582-33ec-4c5c-87c0-b010a6b2e917",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f47b5582-33ec-4c5c-87c0-b010a6b2e917",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_C",
          "UK_NCSC_CAF_v3.2_C1",
          "UK_NCSC_CAF_v3.2_C1.c",
          "UK_NCSC_CAF_v3.2_C1.d",
          "UK_NCSC_CAF_v3.2_C2",
          "UK_NCSC_CAF_v3.2_C2.b"
        ],
        "parameters": {
          "logAnalyticsWorkspaceId": {
            "value": "[parameters('logAnalyticsWorkspaceId-f47b5582-33ec-4c5c-87c0-b010a6b2e917')]"
          },
          "effect": {
            "value": "[parameters('effect-f47b5582-33ec-4c5c-87c0-b010a6b2e917')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "95edb821-ddaf-4404-9732-666045e056b4",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/95edb821-ddaf-4404-9732-666045e056b4",
        "definitionVersion": "9.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_B4.b"
        ],
        "parameters": {
          "source": {
            "value": "[parameters('source-95edb821-ddaf-4404-9732-666045e056b4')]"
          },
          "warn": {
            "value": "[parameters('warn-95edb821-ddaf-4404-9732-666045e056b4')]"
          },
          "effect": {
            "value": "[parameters('effect-95edb821-ddaf-4404-9732-666045e056b4')]"
          },
          "excludedNamespaces": {
            "value": "[parameters('excludedNamespaces-95edb821-ddaf-4404-9732-666045e056b4')]"
          },
          "namespaces": {
            "value": "[parameters('namespaces-95edb821-ddaf-4404-9732-666045e056b4')]"
          },
          "labelSelector": {
            "value": "[parameters('labelSelector-95edb821-ddaf-4404-9732-666045e056b4')]"
          },
          "excludedContainers": {
            "value": "[parameters('excludedContainers-95edb821-ddaf-4404-9732-666045e056b4')]"
          },
          "excludedImages": {
            "value": "[parameters('excludedImages-95edb821-ddaf-4404-9732-666045e056b4')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "a70ca396-0a34-413a-88e1-b956c1e683be",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a70ca396-0a34-413a-88e1-b956c1e683be",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_C",
          "UK_NCSC_CAF_v3.2_C1",
          "UK_NCSC_CAF_v3.2_C1.c",
          "UK_NCSC_CAF_v3.2_C1.d",
          "UK_NCSC_CAF_v3.2_C2",
          "UK_NCSC_CAF_v3.2_C2.b"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-a70ca396-0a34-413a-88e1-b956c1e683be')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "e068b215-0026-4354-b347-8fb2766f73a2",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e068b215-0026-4354-b347-8fb2766f73a2",
        "definitionVersion": "3.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_B4.b",
          "UK_NCSC_CAF_v3.2_B2.c"
        ],
        "parameters": {
          "IncludeArcMachines": {
            "value": "[parameters('IncludeArcMachines-e068b215-0026-4354-b347-8fb2766f73a2')]"
          },
          "UsersOrGroupsThatMayAccessThisComputerFromTheNetwork": {
            "value": "[parameters('UsersOrGroupsThatMayAccessThisComputerFromTheNetwork-e068b215-0026-4354-b347-8fb2766f73a2')]"
          },
          "UsersOrGroupsThatMayLogOnLocally": {
            "value": "[parameters('UsersOrGroupsThatMayLogOnLocally-e068b215-0026-4354-b347-8fb2766f73a2')]"
          },
          "UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices": {
            "value": "[parameters('UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices-e068b215-0026-4354-b347-8fb2766f73a2')]"
          },
          "UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork": {
            "value": "[parameters('UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork-e068b215-0026-4354-b347-8fb2766f73a2')]"
          },
          "UsersOrGroupsThatMayManageAuditingAndSecurityLog": {
            "value": "[parameters('UsersOrGroupsThatMayManageAuditingAndSecurityLog-e068b215-0026-4354-b347-8fb2766f73a2')]"
          },
          "UsersOrGroupsThatMayBackUpFilesAndDirectories": {
            "value": "[parameters('UsersOrGroupsThatMayBackUpFilesAndDirectories-e068b215-0026-4354-b347-8fb2766f73a2')]"
          },
          "UsersOrGroupsThatMayChangeTheSystemTime": {
            "value": "[parameters('UsersOrGroupsThatMayChangeTheSystemTime-e068b215-0026-4354-b347-8fb2766f73a2')]"
          },
          "UsersOrGroupsThatMayChangeTheTimeZone": {
            "value": "[parameters('UsersOrGroupsThatMayChangeTheTimeZone-e068b215-0026-4354-b347-8fb2766f73a2')]"
          },
          "UsersOrGroupsThatMayCreateATokenObject": {
            "value": "[parameters('UsersOrGroupsThatMayCreateATokenObject-e068b215-0026-4354-b347-8fb2766f73a2')]"
          },
          "UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob": {
            "value": "[parameters('UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob-e068b215-0026-4354-b347-8fb2766f73a2')]"
          },
          "UsersAndGroupsThatAreDeniedLoggingOnAsAService": {
            "value": "[parameters('UsersAndGroupsThatAreDeniedLoggingOnAsAService-e068b215-0026-4354-b347-8fb2766f73a2')]"
          },
          "UsersAndGroupsThatAreDeniedLocalLogon": {
            "value": "[parameters('UsersAndGroupsThatAreDeniedLocalLogon-e068b215-0026-4354-b347-8fb2766f73a2')]"
          },
          "UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices": {
            "value": "[parameters('UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices-e068b215-0026-4354-b347-8fb2766f73a2')]"
          },
          "UserAndGroupsThatMayForceShutdownFromARemoteSystem": {
            "value": "[parameters('UserAndGroupsThatMayForceShutdownFromARemoteSystem-e068b215-0026-4354-b347-8fb2766f73a2')]"
          },
          "UsersAndGroupsThatMayRestoreFilesAndDirectories": {
            "value": "[parameters('UsersAndGroupsThatMayRestoreFilesAndDirectories-e068b215-0026-4354-b347-8fb2766f73a2')]"
          },
          "UsersAndGroupsThatMayShutDownTheSystem": {
            "value": "[parameters('UsersAndGroupsThatMayShutDownTheSystem-e068b215-0026-4354-b347-8fb2766f73a2')]"
          },
          "UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects": {
            "value": "[parameters('UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects-e068b215-0026-4354-b347-8fb2766f73a2')]"
          },
          "effect": {
            "value": "[parameters('effect-e068b215-0026-4354-b347-8fb2766f73a2')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "d26f7642-7545-4e18-9b75-8c9bbdee3a9a",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d26f7642-7545-4e18-9b75-8c9bbdee3a9a",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_B4.b",
          "UK_NCSC_CAF_v3.2_B2.a"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-d26f7642-7545-4e18-9b75-8c9bbdee3a9a')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "d416745a-506c-48b6-8ab1-83cb814bcaa3",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d416745a-506c-48b6-8ab1-83cb814bcaa3",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_B4.b"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-d416745a-506c-48b6-8ab1-83cb814bcaa3')]"
          },
          "virtualNetworkId": {
            "value": "[parameters('virtualNetworkId-d416745a-506c-48b6-8ab1-83cb814bcaa3')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "ae89ebca-1c92-4898-ac2c-9f63decb045c",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ae89ebca-1c92-4898-ac2c-9f63decb045c",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_B4.b",
          "UK_NCSC_CAF_v3.2_C1.c",
          "UK_NCSC_CAF_v3.2_C1.d"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-ae89ebca-1c92-4898-ac2c-9f63decb045c')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "492a29ed-d143-4f03-b6a4-705ce081b463",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/492a29ed-d143-4f03-b6a4-705ce081b463",
        "definitionVersion": "3.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_B2.a",
          "UK_NCSC_CAF_v3.2_B4.b"
        ],
        "parameters": {
          "IncludeArcMachines": {
            "value": "[parameters('IncludeArcMachines-492a29ed-d143-4f03-b6a4-705ce081b463')]"
          },
          "UACAdminApprovalModeForTheBuiltinAdministratorAccount": {
            "value": "[parameters('UACAdminApprovalModeForTheBuiltinAdministratorAccount-492a29ed-d143-4f03-b6a4-705ce081b463')]"
          },
          "UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode": {
            "value": "[parameters('UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode-492a29ed-d143-4f03-b6a4-705ce081b463')]"
          },
          "UACDetectApplicationInstallationsAndPromptForElevation": {
            "value": "[parameters('UACDetectApplicationInstallationsAndPromptForElevation-492a29ed-d143-4f03-b6a4-705ce081b463')]"
          },
          "UACRunAllAdministratorsInAdminApprovalMode": {
            "value": "[parameters('UACRunAllAdministratorsInAdminApprovalMode-492a29ed-d143-4f03-b6a4-705ce081b463')]"
          },
          "effect": {
            "value": "[parameters('effect-492a29ed-d143-4f03-b6a4-705ce081b463')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "35d9882c-993d-44e6-87d2-db66ce21b636",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/35d9882c-993d-44e6-87d2-db66ce21b636",
        "definitionVersion": "3.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_B4"
        ],
        "parameters": {
          "IncludeArcMachines": {
            "value": "[parameters('IncludeArcMachines-35d9882c-993d-44e6-87d2-db66ce21b636')]"
          },
          "WindowsFirewallDomainUseProfileSettings": {
            "value": "[parameters('WindowsFirewallDomainUseProfileSettings-35d9882c-993d-44e6-87d2-db66ce21b636')]"
          },
          "WindowsFirewallDomainBehaviorForOutboundConnections": {
            "value": "[parameters('WindowsFirewallDomainBehaviorForOutboundConnections-35d9882c-993d-44e6-87d2-db66ce21b636')]"
          },
          "WindowsFirewallDomainApplyLocalConnectionSecurityRules": {
            "value": "[parameters('WindowsFirewallDomainApplyLocalConnectionSecurityRules-35d9882c-993d-44e6-87d2-db66ce21b636')]"
          },
          "WindowsFirewallDomainApplyLocalFirewallRules": {
            "value": "[parameters('WindowsFirewallDomainApplyLocalFirewallRules-35d9882c-993d-44e6-87d2-db66ce21b636')]"
          },
          "WindowsFirewallDomainDisplayNotifications": {
            "value": "[parameters('WindowsFirewallDomainDisplayNotifications-35d9882c-993d-44e6-87d2-db66ce21b636')]"
          },
          "WindowsFirewallPrivateUseProfileSettings": {
            "value": "[parameters('WindowsFirewallPrivateUseProfileSettings-35d9882c-993d-44e6-87d2-db66ce21b636')]"
          },
          "WindowsFirewallPrivateBehaviorForOutboundConnections": {
            "value": "[parameters('WindowsFirewallPrivateBehaviorForOutboundConnections-35d9882c-993d-44e6-87d2-db66ce21b636')]"
          },
          "WindowsFirewallPrivateApplyLocalConnectionSecurityRules": {
            "value": "[parameters('WindowsFirewallPrivateApplyLocalConnectionSecurityRules-35d9882c-993d-44e6-87d2-db66ce21b636')]"
          },
          "WindowsFirewallPrivateApplyLocalFirewallRules": {
            "value": "[parameters('WindowsFirewallPrivateApplyLocalFirewallRules-35d9882c-993d-44e6-87d2-db66ce21b636')]"
          },
          "WindowsFirewallPrivateDisplayNotifications": {
            "value": "[parameters('WindowsFirewallPrivateDisplayNotifications-35d9882c-993d-44e6-87d2-db66ce21b636')]"
          },
          "WindowsFirewallPublicUseProfileSettings": {
            "value": "[parameters('WindowsFirewallPublicUseProfileSettings-35d9882c-993d-44e6-87d2-db66ce21b636')]"
          },
          "WindowsFirewallPublicBehaviorForOutboundConnections": {
            "value": "[parameters('WindowsFirewallPublicBehaviorForOutboundConnections-35d9882c-993d-44e6-87d2-db66ce21b636')]"
          },
          "WindowsFirewallPublicApplyLocalConnectionSecurityRules": {
            "value": "[parameters('WindowsFirewallPublicApplyLocalConnectionSecurityRules-35d9882c-993d-44e6-87d2-db66ce21b636')]"
          },
          "WindowsFirewallPublicApplyLocalFirewallRules": {
            "value": "[parameters('WindowsFirewallPublicApplyLocalFirewallRules-35d9882c-993d-44e6-87d2-db66ce21b636')]"
          },
          "WindowsFirewallPublicDisplayNotifications": {
            "value": "[parameters('WindowsFirewallPublicDisplayNotifications-35d9882c-993d-44e6-87d2-db66ce21b636')]"
          },
          "WindowsFirewallDomainAllowUnicastResponse": {
            "value": "[parameters('WindowsFirewallDomainAllowUnicastResponse-35d9882c-993d-44e6-87d2-db66ce21b636')]"
          },
          "WindowsFirewallPrivateAllowUnicastResponse": {
            "value": "[parameters('WindowsFirewallPrivateAllowUnicastResponse-35d9882c-993d-44e6-87d2-db66ce21b636')]"
          },
          "WindowsFirewallPublicAllowUnicastResponse": {
            "value": "[parameters('WindowsFirewallPublicAllowUnicastResponse-35d9882c-993d-44e6-87d2-db66ce21b636')]"
          },
          "effect": {
            "value": "[parameters('effect-35d9882c-993d-44e6-87d2-db66ce21b636')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "4f4f78b8-e367-4b10-a341-d9a4ad5cf1c7",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4f4f78b8-e367-4b10-a341-d9a4ad5cf1c7",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_D",
          "UK_NCSC_CAF_v3.2_D1"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-4f4f78b8-e367-4b10-a341-d9a4ad5cf1c7')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "47a1ee2f-2a2a-4576-bf2a-e0e36709c2b8",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/47a1ee2f-2a2a-4576-bf2a-e0e36709c2b8",
        "definitionVersion": "5.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_B4"
        ],
        "parameters": {
          "source": {
            "value": "[parameters('source-47a1ee2f-2a2a-4576-bf2a-e0e36709c2b8')]"
          },
          "warn": {
            "value": "[parameters('warn-47a1ee2f-2a2a-4576-bf2a-e0e36709c2b8')]"
          },
          "effect": {
            "value": "[parameters('effect-47a1ee2f-2a2a-4576-bf2a-e0e36709c2b8')]"
          },
          "excludedNamespaces": {
            "value": "[parameters('excludedNamespaces-47a1ee2f-2a2a-4576-bf2a-e0e36709c2b8')]"
          },
          "namespaces": {
            "value": "[parameters('namespaces-47a1ee2f-2a2a-4576-bf2a-e0e36709c2b8')]"
          },
          "labelSelector": {
            "value": "[parameters('labelSelector-47a1ee2f-2a2a-4576-bf2a-e0e36709c2b8')]"
          },
          "excludedImages": {
            "value": "[parameters('excludedImages-47a1ee2f-2a2a-4576-bf2a-e0e36709c2b8')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "c5447c04-a4d7-4ba8-a263-c9ee321a6858",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c5447c04-a4d7-4ba8-a263-c9ee321a6858",
        "definitionVersion": "3.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_B4.b"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-c5447c04-a4d7-4ba8-a263-c9ee321a6858')]"
          },
          "operationName": {
            "value": "[parameters('operationName-c5447c04-a4d7-4ba8-a263-c9ee321a6858')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "f2143251-70de-4e81-87a8-36cee5a2f29d",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f2143251-70de-4e81-87a8-36cee5a2f29d",
        "definitionVersion": "3.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_B2.a",
          "UK_NCSC_CAF_v3.2_B3.b",
          "UK_NCSC_CAF_v3.2_C1.b"
        ],
        "parameters": {
          "IncludeArcMachines": {
            "value": "[parameters('IncludeArcMachines-f2143251-70de-4e81-87a8-36cee5a2f29d')]"
          },
          "EnforcePasswordHistory": {
            "value": "[parameters('EnforcePasswordHistory-f2143251-70de-4e81-87a8-36cee5a2f29d')]"
          },
          "MaximumPasswordAge": {
            "value": "[parameters('MaximumPasswordAge-f2143251-70de-4e81-87a8-36cee5a2f29d')]"
          },
          "MinimumPasswordAge": {
            "value": "[parameters('MinimumPasswordAge-f2143251-70de-4e81-87a8-36cee5a2f29d')]"
          },
          "MinimumPasswordLength": {
            "value": "[parameters('MinimumPasswordLength-f2143251-70de-4e81-87a8-36cee5a2f29d')]"
          },
          "PasswordMustMeetComplexityRequirements": {
            "value": "[parameters('PasswordMustMeetComplexityRequirements-f2143251-70de-4e81-87a8-36cee5a2f29d')]"
          },
          "effect": {
            "value": "[parameters('effect-f2143251-70de-4e81-87a8-36cee5a2f29d')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "146412e9-005c-472b-9e48-c87b72ac229e",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/146412e9-005c-472b-9e48-c87b72ac229e",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_B2.a"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-146412e9-005c-472b-9e48-c87b72ac229e')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "72650e9f-97bc-4b2a-ab5f-9781a9fcecbc",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/72650e9f-97bc-4b2a-ab5f-9781a9fcecbc",
        "definitionVersion": "2.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_B4.b"
        ],
        "parameters": {
          "IncludeArcMachines": {
            "value": "[parameters('IncludeArcMachines-72650e9f-97bc-4b2a-ab5f-9781a9fcecbc')]"
          },
          "effect": {
            "value": "[parameters('effect-72650e9f-97bc-4b2a-ab5f-9781a9fcecbc')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "8ac833bd-f505-48d5-887e-c993a1d3eea0",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8ac833bd-f505-48d5-887e-c993a1d3eea0",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_B2.a",
          "UK_NCSC_CAF_v3.2_B4.b"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-8ac833bd-f505-48d5-887e-c993a1d3eea0')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "7926a6d1-b268-4586-8197-e8ae90c877d7",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7926a6d1-b268-4586-8197-e8ae90c877d7",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_C",
          "UK_NCSC_CAF_v3.2_C1",
          "UK_NCSC_CAF_v3.2_C1.c",
          "UK_NCSC_CAF_v3.2_C1.d",
          "UK_NCSC_CAF_v3.2_C2",
          "UK_NCSC_CAF_v3.2_C2.b"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-7926a6d1-b268-4586-8197-e8ae90c877d7')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "12d4fa5e-1f9f-4c21-97a9-b99b3c6611b5",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/12d4fa5e-1f9f-4c21-97a9-b99b3c6611b5",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_B4.b"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-12d4fa5e-1f9f-4c21-97a9-b99b3c6611b5')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "58383b73-94a9-4414-b382-4146eb02611b",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/58383b73-94a9-4414-b382-4146eb02611b",
        "definitionVersion": "3.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_B4.b"
        ],
        "parameters": {
          "IncludeArcMachines": {
            "value": "[parameters('IncludeArcMachines-58383b73-94a9-4414-b382-4146eb02611b')]"
          },
          "AuditProcessTermination": {
            "value": "[parameters('AuditProcessTermination-58383b73-94a9-4414-b382-4146eb02611b')]"
          },
          "effect": {
            "value": "[parameters('effect-58383b73-94a9-4414-b382-4146eb02611b')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "32133ab0-ee4b-4b44-98d6-042180979d50",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/32133ab0-ee4b-4b44-98d6-042180979d50",
        "definitionVersion": "2.*.*-preview",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_C",
          "UK_NCSC_CAF_v3.2_C1",
          "UK_NCSC_CAF_v3.2_C1.c",
          "UK_NCSC_CAF_v3.2_C1.d",
          "UK_NCSC_CAF_v3.2_C2",
          "UK_NCSC_CAF_v3.2_C2.b"
        ],
        "parameters": {
          "listOfImageIdToInclude_windows": {
            "value": "[parameters('listOfImageIdToInclude_windows-32133ab0-ee4b-4b44-98d6-042180979d50')]"
          },
          "listOfImageIdToInclude_linux": {
            "value": "[parameters('listOfImageIdToInclude_linux-32133ab0-ee4b-4b44-98d6-042180979d50')]"
          },
          "effect": {
            "value": "[parameters('effect-32133ab0-ee4b-4b44-98d6-042180979d50')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "06a78e20-9358-41c9-923c-fb736d382a4d",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/06a78e20-9358-41c9-923c-fb736d382a4d",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_C1.c",
          "UK_NCSC_CAF_v3.2_C1.d"
        ],
        "parameters": {}
      },
      {
        "policyDefinitionReferenceId": "95bccee9-a7f8-4bec-9ee9-62c3473701fc",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/95bccee9-a7f8-4bec-9ee9-62c3473701fc",
        "definitionVersion": "2.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_B2.a",
          "UK_NCSC_CAF_v3.2_B4.b"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-95bccee9-a7f8-4bec-9ee9-62c3473701fc')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "13a6c84f-49a5-410a-b5df-5b880c3fe009",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/13a6c84f-49a5-410a-b5df-5b880c3fe009",
        "definitionVersion": "1.*.*-preview",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_B2.a"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-13a6c84f-49a5-410a-b5df-5b880c3fe009')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "d31e5c31-63b2-4f12-887b-e49456834fa1",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d31e5c31-63b2-4f12-887b-e49456834fa1",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_C",
          "UK_NCSC_CAF_v3.2_C1",
          "UK_NCSC_CAF_v3.2_C1.c",
          "UK_NCSC_CAF_v3.2_C1.d",
          "UK_NCSC_CAF_v3.2_C2",
          "UK_NCSC_CAF_v3.2_C2.b"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-d31e5c31-63b2-4f12-887b-e49456834fa1')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "b4dec045-250a-48c2-b5cc-e0c4eec8b5b4",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b4dec045-250a-48c2-b5cc-e0c4eec8b5b4",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_B2.a",
          "UK_NCSC_CAF_v3.2_B4.b"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-b4dec045-250a-48c2-b5cc-e0c4eec8b5b4')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "0a9fbe0d-c5c4-4da8-87d8-f4fd77338835",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0a9fbe0d-c5c4-4da8-87d8-f4fd77338835",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_C",
          "UK_NCSC_CAF_v3.2_C1",
          "UK_NCSC_CAF_v3.2_C1.c",
          "UK_NCSC_CAF_v3.2_C1.d",
          "UK_NCSC_CAF_v3.2_C2",
          "UK_NCSC_CAF_v3.2_C2.b"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-0a9fbe0d-c5c4-4da8-87d8-f4fd77338835')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "22730e10-96f6-4aac-ad84-9383d35b5917",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/22730e10-96f6-4aac-ad84-9383d35b5917",
        "definitionVersion": "3.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_B2.a"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-22730e10-96f6-4aac-ad84-9383d35b5917')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "d38668f5-d155-42c7-ab3d-9b57b50f8fbf",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d38668f5-d155-42c7-ab3d-9b57b50f8fbf",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_C",
          "UK_NCSC_CAF_v3.2_C1",
          "UK_NCSC_CAF_v3.2_C1.c",
          "UK_NCSC_CAF_v3.2_C1.d",
          "UK_NCSC_CAF_v3.2_C2",
          "UK_NCSC_CAF_v3.2_C2.b"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-d38668f5-d155-42c7-ab3d-9b57b50f8fbf')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "abda6d70-9778-44e7-84a8-06713e6db027",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/abda6d70-9778-44e7-84a8-06713e6db027",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_B2.a"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-abda6d70-9778-44e7-84a8-06713e6db027')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "5c3bc7b8-a64c-4e08-a9cd-7ff0f31e1138",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5c3bc7b8-a64c-4e08-a9cd-7ff0f31e1138",
        "definitionVersion": "2.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_C",
          "UK_NCSC_CAF_v3.2_C1",
          "UK_NCSC_CAF_v3.2_C1.c",
          "UK_NCSC_CAF_v3.2_C1.d",
          "UK_NCSC_CAF_v3.2_C2",
          "UK_NCSC_CAF_v3.2_C2.b"
        ],
        "parameters": {
          "listOfImageIdToInclude_windows": {
            "value": "[parameters('listOfImageIdToInclude_windows-5c3bc7b8-a64c-4e08-a9cd-7ff0f31e1138')]"
          },
          "listOfImageIdToInclude_linux": {
            "value": "[parameters('listOfImageIdToInclude_linux-5c3bc7b8-a64c-4e08-a9cd-7ff0f31e1138')]"
          },
          "effect": {
            "value": "[parameters('effect-5c3bc7b8-a64c-4e08-a9cd-7ff0f31e1138')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "b954148f-4c11-4c38-8221-be76711e194a",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b954148f-4c11-4c38-8221-be76711e194a",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_B4.b",
          "UK_NCSC_CAF_v3.2_C",
          "UK_NCSC_CAF_v3.2_C1",
          "UK_NCSC_CAF_v3.2_C1.c",
          "UK_NCSC_CAF_v3.2_C1.d",
          "UK_NCSC_CAF_v3.2_C2",
          "UK_NCSC_CAF_v3.2_C2.b"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-b954148f-4c11-4c38-8221-be76711e194a')]"
          },
          "operationName": {
            "value": "[parameters('operationName-b954148f-4c11-4c38-8221-be76711e194a')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "bfecdea6-31c4-4045-ad42-71b9dc87247d",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/bfecdea6-31c4-4045-ad42-71b9dc87247d",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_C1.b"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-bfecdea6-31c4-4045-ad42-71b9dc87247d')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "19dd1db6-f442-49cf-a838-b0786b4401ef",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/19dd1db6-f442-49cf-a838-b0786b4401ef",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_B2.a",
          "UK_NCSC_CAF_v3.2_B3.b"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-19dd1db6-f442-49cf-a838-b0786b4401ef')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "ee984370-154a-4ee8-9726-19d900e56fc0",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ee984370-154a-4ee8-9726-19d900e56fc0",
        "definitionVersion": "3.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_B2.a",
          "UK_NCSC_CAF_v3.2_B4.b"
        ],
        "parameters": {
          "IncludeArcMachines": {
            "value": "[parameters('IncludeArcMachines-ee984370-154a-4ee8-9726-19d900e56fc0')]"
          },
          "AccountsGuestAccountStatus": {
            "value": "[parameters('AccountsGuestAccountStatus-ee984370-154a-4ee8-9726-19d900e56fc0')]"
          },
          "effect": {
            "value": "[parameters('effect-ee984370-154a-4ee8-9726-19d900e56fc0')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "78215662-041e-49ed-a9dd-5385911b3a1f",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/78215662-041e-49ed-a9dd-5385911b3a1f",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_B2.a",
          "UK_NCSC_CAF_v3.2_B4.b"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-78215662-041e-49ed-a9dd-5385911b3a1f')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "df73bd95-24da-4a4f-96b9-4e8b94b402bd",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/df73bd95-24da-4a4f-96b9-4e8b94b402bd",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_B2.c"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-df73bd95-24da-4a4f-96b9-4e8b94b402bd')]"
          },
          "endpointType": {
            "value": "[parameters('endpointType-df73bd95-24da-4a4f-96b9-4e8b94b402bd')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "1c988dd6-ade4-430f-a608-2a3e5b0a6d38",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1c988dd6-ade4-430f-a608-2a3e5b0a6d38",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_B4.b"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-1c988dd6-ade4-430f-a608-2a3e5b0a6d38')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "d550e854-df1a-4de9-bf44-cd894b39a95e",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d550e854-df1a-4de9-bf44-cd894b39a95e",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_C1.b"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-d550e854-df1a-4de9-bf44-cd894b39a95e')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "672fe5a1-2fcd-42d7-b85d-902b6e28c6ff",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/672fe5a1-2fcd-42d7-b85d-902b6e28c6ff",
        "definitionVersion": "6.*.*-preview",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_B2.a"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-672fe5a1-2fcd-42d7-b85d-902b6e28c6ff')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "30f71ea1-ac77-4f26-9fc5-2d926bbd4ba7",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/30f71ea1-ac77-4f26-9fc5-2d926bbd4ba7",
        "definitionVersion": "2.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_B2.a",
          "UK_NCSC_CAF_v3.2_B4.b"
        ],
        "parameters": {
          "IncludeArcMachines": {
            "value": "[parameters('IncludeArcMachines-30f71ea1-ac77-4f26-9fc5-2d926bbd4ba7')]"
          },
          "MembersToInclude": {
            "value": "[parameters('MembersToInclude-30f71ea1-ac77-4f26-9fc5-2d926bbd4ba7')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "5d4e3c65-4873-47be-94f3-6f8b953a3598",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5d4e3c65-4873-47be-94f3-6f8b953a3598",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_B2.a",
          "UK_NCSC_CAF_v3.2_B4.b"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-5d4e3c65-4873-47be-94f3-6f8b953a3598')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "6c53d030-cc64-46f0-906d-2bc061cd1334",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6c53d030-cc64-46f0-906d-2bc061cd1334",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_C1.b"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-6c53d030-cc64-46f0-906d-2bc061cd1334')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "21a6bc25-125e-4d13-b82d-2e19b7208ab7",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/21a6bc25-125e-4d13-b82d-2e19b7208ab7",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_B2.a"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-21a6bc25-125e-4d13-b82d-2e19b7208ab7')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "1bc02227-0cb6-4e11-8f53-eb0b22eab7e8",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1bc02227-0cb6-4e11-8f53-eb0b22eab7e8",
        "definitionVersion": "1.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_C1.b"
        ],
        "parameters": {
          "effect": {
            "value": "[parameters('effect-1bc02227-0cb6-4e11-8f53-eb0b22eab7e8')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "0a075868-4c26-42ef-914c-5bc007359560",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0a075868-4c26-42ef-914c-5bc007359560",
        "definitionVersion": "2.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_B2.a",
          "UK_NCSC_CAF_v3.2_B4.b"
        ],
        "parameters": {
          "maximumValidityInMonths": {
            "value": "[parameters('maximumValidityInMonths-0a075868-4c26-42ef-914c-5bc007359560')]"
          },
          "effect": {
            "value": "[parameters('effect-0a075868-4c26-42ef-914c-5bc007359560')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "9f061a12-e40d-4183-a00e-171812443373",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9f061a12-e40d-4183-a00e-171812443373",
        "definitionVersion": "4.*.*",
        "groupNames": [
          "UK_NCSC_CAF_v3.2_B4.b"
        ],
        "parameters": {
          "source": {
            "value": "[parameters('source-9f061a12-e40d-4183-a00e-171812443373')]"
          },
          "warn": {
            "value": "[parameters('warn-9f061a12-e40d-4183-a00e-171812443373')]"
          },
          "effect": {
            "value": "[parameters('effect-9f061a12-e40d-4183-a00e-171812443373')]"
          },
          "excludedNamespaces": {
            "value": "[parameters('excludedNamespaces-9f061a12-e40d-4183-a00e-171812443373')]"
          },
          "namespaces": {
            "value": "[parameters('namespaces-9f061a12-e40d-4183-a00e-171812443373')]"
          },
          "labelSelector": {
            "value": "[parameters('labelSelector-9f061a12-e40d-4183-a00e-171812443373')]"
          }
        }
      }
    ],
    "versions": [
      "1.1.0",
      "1.0.0"
    ]
  },
  "id": "/providers/Microsoft.Authorization/policySetDefinitions/6d220abf-cf6f-4b17-8f7e-0644c4cc84b4",
  "name": "6d220abf-cf6f-4b17-8f7e-0644c4cc84b4"
}