{ "properties": { "displayName": "CIS Microsoft Azure Foundations Benchmark v2.0.0", "policyType": "BuiltIn", "description": "The Center for Internet Security (CIS) is a nonprofit entity whose mission is to 'identify, develop, validate, promote, and sustain best practice solutions for cyberdefense.' CIS benchmarks are configuration baselines and best practices for securely configuring a system. These policies address a subset of CIS Microsoft Azure Foundations Benchmark v2.0.0 controls. For more information, visit https://aka.ms/cisazure200-initiative", "metadata": { "version": "1.5.0", "category": "Regulatory Compliance" }, "version": "1.5.0", "policyDefinitionGroups": [ { "name": "CIS_Azure_2.0.0_1.1.1", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_1.1.1" }, { "name": "CIS_Azure_2.0.0_1.1.2", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_1.1.2" }, { "name": "CIS_Azure_2.0.0_1.1.3", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_1.1.3" }, { "name": "CIS_Azure_2.0.0_1.1.4", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_1.1.4" }, { "name": "CIS_Azure_2.0.0_1.2.1", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_1.2.1" }, { "name": "CIS_Azure_2.0.0_1.2.2", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_1.2.2" }, { "name": "CIS_Azure_2.0.0_1.2.3", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_1.2.3" }, { "name": "CIS_Azure_2.0.0_1.2.4", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_1.2.4" }, { "name": "CIS_Azure_2.0.0_1.2.5", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_1.2.5" }, { "name": "CIS_Azure_2.0.0_1.2.6", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_1.2.6" }, { "name": "CIS_Azure_2.0.0_1.3", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_1.3" }, { "name": "CIS_Azure_2.0.0_1.4", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_1.4" }, { "name": "CIS_Azure_2.0.0_1.5", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_1.5" }, { "name": "CIS_Azure_2.0.0_1.6", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_1.6" }, { "name": "CIS_Azure_2.0.0_1.7", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_1.7" }, { "name": "CIS_Azure_2.0.0_1.8", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_1.8" }, { "name": "CIS_Azure_2.0.0_1.9", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_1.9" }, { "name": "CIS_Azure_2.0.0_1.10", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_1.10" }, { "name": "CIS_Azure_2.0.0_1.11", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_1.11" }, { "name": "CIS_Azure_2.0.0_1.12", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_1.12" }, { "name": "CIS_Azure_2.0.0_1.13", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_1.13" }, { "name": "CIS_Azure_2.0.0_1.14", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_1.14" }, { "name": "CIS_Azure_2.0.0_1.15", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_1.15" }, { "name": "CIS_Azure_2.0.0_1.16", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_1.16" }, { "name": "CIS_Azure_2.0.0_1.17", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_1.17" }, { "name": "CIS_Azure_2.0.0_1.18", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_1.18" }, { "name": "CIS_Azure_2.0.0_1.19", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_1.19" }, { "name": "CIS_Azure_2.0.0_1.20", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_1.20" }, { "name": "CIS_Azure_2.0.0_1.21", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_1.21" }, { "name": "CIS_Azure_2.0.0_1.22", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_1.22" }, { "name": "CIS_Azure_2.0.0_1.23", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_1.23" }, { "name": "CIS_Azure_2.0.0_1.24", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_1.24" }, { "name": "CIS_Azure_2.0.0_1.25", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_1.25" }, { "name": "CIS_Azure_2.0.0_2.1.1", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_2.1.1" }, { "name": "CIS_Azure_2.0.0_2.1.2", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_2.1.2" }, { "name": "CIS_Azure_2.0.0_2.1.3", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_2.1.3" }, { "name": "CIS_Azure_2.0.0_2.1.4", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_2.1.4" }, { "name": "CIS_Azure_2.0.0_2.1.5", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_2.1.5" }, { "name": "CIS_Azure_2.0.0_2.1.6", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_2.1.6" }, { "name": "CIS_Azure_2.0.0_2.1.7", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_2.1.7" }, { "name": "CIS_Azure_2.0.0_2.1.8", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_2.1.8" }, { "name": "CIS_Azure_2.0.0_2.1.9", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_2.1.9" }, { "name": "CIS_Azure_2.0.0_2.1.10", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_2.1.10" }, { "name": "CIS_Azure_2.0.0_2.1.11", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_2.1.11" }, { "name": "CIS_Azure_2.0.0_2.1.12", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_2.1.12" }, { "name": "CIS_Azure_2.0.0_2.1.13", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_2.1.13" }, { "name": "CIS_Azure_2.0.0_2.1.14", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_2.1.14" }, { "name": "CIS_Azure_2.0.0_2.1.15", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_2.1.15" }, { "name": "CIS_Azure_2.0.0_2.1.16", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_2.1.16" }, { "name": "CIS_Azure_2.0.0_2.1.17", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_2.1.17" }, { "name": "CIS_Azure_2.0.0_2.1.18", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_2.1.18" }, { "name": "CIS_Azure_2.0.0_2.1.19", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_2.1.19" }, { "name": "CIS_Azure_2.0.0_2.1.20", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_2.1.20" }, { "name": "CIS_Azure_2.0.0_2.1.21", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_2.1.21" }, { "name": "CIS_Azure_2.0.0_2.1.22", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_2.1.22" }, { "name": "CIS_Azure_2.0.0_2.2.1", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_2.2.1" }, { "name": "CIS_Azure_2.0.0_3.1", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_3.1" }, { "name": "CIS_Azure_2.0.0_3.2", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_3.2" }, { "name": "CIS_Azure_2.0.0_3.3", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_3.3" }, { "name": "CIS_Azure_2.0.0_3.4", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_3.4" }, { "name": "CIS_Azure_2.0.0_3.5", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_3.5" }, { "name": "CIS_Azure_2.0.0_3.6", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_3.6" }, { "name": "CIS_Azure_2.0.0_3.7", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_3.7" }, { "name": "CIS_Azure_2.0.0_3.8", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_3.8" }, { "name": "CIS_Azure_2.0.0_3.9", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_3.9" }, { "name": "CIS_Azure_2.0.0_3.10", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_3.10" }, { "name": "CIS_Azure_2.0.0_3.11", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_3.11" }, { "name": "CIS_Azure_2.0.0_3.12", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_3.12" }, { "name": "CIS_Azure_2.0.0_3.13", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_3.13" }, { "name": "CIS_Azure_2.0.0_3.14", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_3.14" }, { "name": "CIS_Azure_2.0.0_3.15", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_3.15" }, { "name": "CIS_Azure_2.0.0_4.1.1", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_4.1.1" }, { "name": "CIS_Azure_2.0.0_4.1.2", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_4.1.2" }, { "name": "CIS_Azure_2.0.0_4.1.3", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_4.1.3" }, { "name": "CIS_Azure_2.0.0_4.1.4", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_4.1.4" }, { "name": "CIS_Azure_2.0.0_4.1.5", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_4.1.5" }, { "name": "CIS_Azure_2.0.0_4.1.6", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_4.1.6" }, { "name": "CIS_Azure_2.0.0_4.2.1", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_4.2.1" }, { "name": "CIS_Azure_2.0.0_4.2.2", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_4.2.2" }, { "name": "CIS_Azure_2.0.0_4.2.3", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_4.2.3" }, { "name": "CIS_Azure_2.0.0_4.2.4", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_4.2.4" }, { "name": "CIS_Azure_2.0.0_4.2.5", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_4.2.5" }, { "name": "CIS_Azure_2.0.0_4.3.1", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_4.3.1" }, { "name": "CIS_Azure_2.0.0_4.3.2", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_4.3.2" }, { "name": "CIS_Azure_2.0.0_4.3.3", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_4.3.3" }, { "name": "CIS_Azure_2.0.0_4.3.4", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_4.3.4" }, { "name": "CIS_Azure_2.0.0_4.3.5", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_4.3.5" }, { "name": "CIS_Azure_2.0.0_4.3.6", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_4.3.6" }, { "name": "CIS_Azure_2.0.0_4.3.7", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_4.3.7" }, { "name": "CIS_Azure_2.0.0_4.3.8", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_4.3.8" }, { "name": "CIS_Azure_2.0.0_4.4.1", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_4.4.1" }, { "name": "CIS_Azure_2.0.0_4.4.2", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_4.4.2" }, { "name": "CIS_Azure_2.0.0_4.4.3", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_4.4.3" }, { "name": "CIS_Azure_2.0.0_4.4.4", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_4.4.4" }, { "name": "CIS_Azure_2.0.0_4.5.1", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_4.5.1" }, { "name": "CIS_Azure_2.0.0_4.5.2", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_4.5.2" }, { "name": "CIS_Azure_2.0.0_4.5.3", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_4.5.3" }, { "name": "CIS_Azure_2.0.0_5.1.1", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_5.1.1" }, { "name": "CIS_Azure_2.0.0_5.1.2", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_5.1.2" }, { "name": "CIS_Azure_2.0.0_5.1.3", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_5.1.3" }, { "name": "CIS_Azure_2.0.0_5.1.4", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_5.1.4" }, { "name": "CIS_Azure_2.0.0_5.1.5", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_5.1.5" }, { "name": "CIS_Azure_2.0.0_5.1.6", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_5.1.6" }, { "name": "CIS_Azure_2.0.0_5.1.7", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_5.1.7" }, { "name": "CIS_Azure_2.0.0_5.2.1", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_5.2.1" }, { "name": "CIS_Azure_2.0.0_5.2.2", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_5.2.2" }, { "name": "CIS_Azure_2.0.0_5.2.3", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_5.2.3" }, { "name": "CIS_Azure_2.0.0_5.2.4", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_5.2.4" }, { "name": "CIS_Azure_2.0.0_5.2.5", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_5.2.5" }, { "name": "CIS_Azure_2.0.0_5.2.6", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_5.2.6" }, { "name": "CIS_Azure_2.0.0_5.2.7", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_5.2.7" }, { "name": "CIS_Azure_2.0.0_5.2.8", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_5.2.8" }, { "name": "CIS_Azure_2.0.0_5.2.9", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_5.2.9" }, { "name": "CIS_Azure_2.0.0_5.2.10", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_5.2.10" }, { "name": "CIS_Azure_2.0.0_5.3.1", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_5.3.1" }, { "name": "CIS_Azure_2.0.0_5.4", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_5.4" }, { "name": "CIS_Azure_2.0.0_5.5", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_5.5" }, { "name": "CIS_Azure_2.0.0_6.1", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_6.1" }, { "name": "CIS_Azure_2.0.0_6.2", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_6.2" }, { "name": "CIS_Azure_2.0.0_6.3", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_6.3" }, { "name": "CIS_Azure_2.0.0_6.4", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_6.4" }, { "name": "CIS_Azure_2.0.0_6.5", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_6.5" }, { "name": "CIS_Azure_2.0.0_6.6", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_6.6" }, { "name": "CIS_Azure_2.0.0_6.7", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_6.7" }, { "name": "CIS_Azure_2.0.0_7.1", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_7.1" }, { "name": "CIS_Azure_2.0.0_7.2", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_7.2" }, { "name": "CIS_Azure_2.0.0_7.3", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_7.3" }, { "name": "CIS_Azure_2.0.0_7.4", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_7.4" }, { "name": "CIS_Azure_2.0.0_7.5", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_7.5" }, { "name": "CIS_Azure_2.0.0_7.6", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_7.6" }, { "name": "CIS_Azure_2.0.0_7.7", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_7.7" }, { "name": "CIS_Azure_2.0.0_8.1", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_8.1" }, { "name": "CIS_Azure_2.0.0_8.2", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_8.2" }, { "name": "CIS_Azure_2.0.0_8.3", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_8.3" }, { "name": "CIS_Azure_2.0.0_8.4", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_8.4" }, { "name": "CIS_Azure_2.0.0_8.5", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_8.5" }, { "name": "CIS_Azure_2.0.0_8.6", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_8.6" }, { "name": "CIS_Azure_2.0.0_8.7", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_8.7" }, { "name": "CIS_Azure_2.0.0_8.8", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_8.8" }, { "name": "CIS_Azure_2.0.0_9.1", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_9.1" }, { "name": "CIS_Azure_2.0.0_9.2", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_9.2" }, { "name": "CIS_Azure_2.0.0_9.3", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_9.3" }, { "name": "CIS_Azure_2.0.0_9.4", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_9.4" }, { "name": "CIS_Azure_2.0.0_9.5", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_9.5" }, { "name": "CIS_Azure_2.0.0_9.6", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_9.6" }, { "name": "CIS_Azure_2.0.0_9.7", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_9.7" }, { "name": "CIS_Azure_2.0.0_9.8", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_9.8" }, { "name": "CIS_Azure_2.0.0_9.9", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_9.9" }, { "name": "CIS_Azure_2.0.0_9.10", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_9.10" }, { "name": "CIS_Azure_2.0.0_9.11", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_9.11" }, { "name": "CIS_Azure_2.0.0_10.1", "additionalMetadataId": "/providers/Microsoft.PolicyInsights/policyMetadata/CIS_Azure_2.0.0_10.1" } ], "parameters": { "effect-e9ac8f8e-ce22-4355-8f04-99b911d6be52": { "type": "String", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: External accounts with read permissions should be removed from your subscription", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-94e1c2ac-cbbe-4cac-a2b5-389c812dee87": { "type": "String", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: External accounts with write permissions should be removed from your subscription", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-339353f6-2387-4a45-abe4-7f529d121046": { "type": "String", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: External accounts with owner permissions should be removed from your subscription", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-e3e008c3-56b9-4133-8fd7-d3347377402a": { "type": "String", "defaultValue": "Disabled", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: MFA should be enabled on accounts with owner permissions on your subscription", "description": "For more information about effects, visit https://aka.ms/policyeffects", "deprecated": true } }, "effect-931e118d-50a1-4457-a5e4-78550e086c52": { "type": "String", "defaultValue": "Disabled", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: MFA should be enabled accounts with write permissions on your subscription", "description": "For more information about effects, visit https://aka.ms/policyeffects", "deprecated": true } }, "effect-4da35fc9-c9e7-4960-aec9-797fe7d9051d": { "type": "String", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: Azure Defender for servers should be enabled", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-feedbf84-6b99-488c-acc2-71c829aa5ffc": { "type": "String", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: SQL databases should have vulnerability findings resolved", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-3b980d31-7904-4bb7-8575-5665739a8052": { "type": "String", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: An activity log alert should exist for specific Security operations", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-2913021d-f2fd-4f3d-b958-22354e2bdbcb": { "type": "String", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: Azure Defender for App Service should be enabled", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-0a9fbe0d-c5c4-4da8-87d8-f4fd77338835": { "type": "String", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: Azure Defender for open-source relational databases should be enabled", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-adbe85b5-83e6-4350-ab58-bf3a4f736e5e": { "type": "String", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: Microsoft Defender for Azure Cosmos DB should be enabled", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-7fe3b40f-802b-4cdd-8bd4-fd799c948cc2": { "type": "String", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: Azure Defender for Azure SQL Database servers should be enabled", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-6581d072-105e-4418-827f-bd446d56421b": { "type": "String", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: Azure Defender for SQL servers on machines should be enabled", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-308fbb08-4ab8-4e67-9b29-592e93fb94fa": { "type": "String", "defaultValue": "Disabled", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: Azure Defender for Storage should be enabled", "description": "For more information about effects, visit https://aka.ms/policyeffects", "deprecated": true } }, "effect-640d2586-54d2-465f-877f-9ffc1d2109f4": { "type": "String", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: Microsoft Defender for Storage should be enabled", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-1c988dd6-ade4-430f-a608-2a3e5b0a6d38": { "type": "String", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: Microsoft Defender for Containers should be enabled", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-0e6763cc-5078-4e64-889d-ff4d9a839047": { "type": "String", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: Azure Defender for Key Vault should be enabled", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-bdc59948-5574-49b3-bb91-76b7c986428d": { "type": "String", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: Azure Defender for DNS should be enabled", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-c3d20c29-b36d-48fe-808b-99a87530ad99": { "type": "String", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: Azure Defender for Resource Manager should be enabled", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-475aae12-b88a-4572-8b36-9b712b2b3a17": { "type": "String", "defaultValue": "Disabled", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: Auto provisioning of the Log Analytics agent should be enabled on your subscription", "description": "For more information about effects, visit https://aka.ms/policyeffects", "deprecated": true } }, "effect-4f4f78b8-e367-4b10-a341-d9a4ad5cf1c7": { "type": "String", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: Subscriptions should have a contact email address for security issues", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-6e2593d9-add6-4083-9c9b-4b7d2188c899": { "type": "String", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: Email notification for high severity alerts should be enabled", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-404c3081-a854-4457-ae30-26a93ef643f9": { "type": "String", "defaultValue": "Audit", "allowedValues": [ "Audit", "Deny", "Disabled" ], "metadata": { "displayName": "Effect for policy: Secure transfer to storage accounts should be enabled", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-862e97cf-49fc-4a5c-9de4-40d4e2e7c8eb": { "type": "String", "defaultValue": "Audit", "allowedValues": [ "Audit", "Deny", "Disabled" ], "metadata": { "displayName": "Effect for policy: Azure Cosmos DB accounts should have firewall rules", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-4fa4b6c0-31ca-4c0d-b10d-24b96f62a751": { "type": "String", "defaultValue": "Audit", "allowedValues": [ "Audit", "Deny", "Disabled" ], "metadata": { "displayName": "Effect for policy: Storage account public access should be disallowed", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-34c877ad-507e-4c82-993e-3452a6e0ad3c": { "type": "String", "defaultValue": "Audit", "allowedValues": [ "Audit", "Deny", "Disabled" ], "metadata": { "displayName": "Effect for policy: Storage accounts should restrict network access", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-2a1a9cdf-e04d-429a-8416-3bfb72a1b26f": { "type": "String", "defaultValue": "Audit", "allowedValues": [ "Audit", "Deny", "Disabled" ], "metadata": { "displayName": "Effect for policy: Storage accounts should restrict network access using virtual network rules", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-c9d007d0-c057-4772-b18c-01e546713bcd": { "type": "String", "defaultValue": "Audit", "allowedValues": [ "Audit", "Deny", "Disabled" ], "metadata": { "displayName": "Effect for policy: Storage accounts should allow access from trusted Microsoft services", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-4733ea7b-a883-42fe-8cac-97454c2a9e4a": { "type": "String", "defaultValue": "Audit", "allowedValues": [ "Audit", "Deny", "Disabled" ], "metadata": { "displayName": "Effect for policy: Storage accounts should have infrastructure encryption", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-bd876905-5b84-4f73-ab2d-2e7a7c4568d9": { "type": "String", "defaultValue": "Audit", "allowedValues": [ "Audit", "Deny", "Disabled" ], "metadata": { "displayName": "Effect for policy: Machines should be configured to periodically check for missing system updates", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-6edd7eda-6dd8-40f7-810d-67160c639cd9": { "type": "String", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: Storage accounts should use private link", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-6fac406b-40ca-413b-bf8e-0bf964659c25": { "type": "String", "defaultValue": "Audit", "allowedValues": [ "Audit", "Disabled" ], "metadata": { "displayName": "Effect for policy: Storage account should use customer-managed key for encryption", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-a451c1ef-c6ca-483d-87ed-f49761e3ffb5": { "type": "String", "defaultValue": "Audit", "allowedValues": [ "Audit", "Disabled" ], "metadata": { "displayName": "Effect for policy: Audit usage of custom RBAC roles", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-e802a67a-daf5-4436-9ea6-f6d821dd0c5d": { "type": "String", "defaultValue": "Audit", "allowedValues": [ "Audit", "Disabled" ], "metadata": { "displayName": "Effect for policy: Enforce SSL connection should be enabled for MySQL database servers", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-58440f8a-10c5-4151-bdce-dfbaad4a20b7": { "type": "String", "defaultValue": "Audit", "allowedValues": [ "Audit", "Disabled" ], "metadata": { "displayName": "Effect for policy: CosmosDB accounts should use private link", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-a6fb4358-5bf4-4ad7-ba82-2cd2f41ce5e9": { "type": "String", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: Auditing on SQL server should be enabled", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "setting-a6fb4358-5bf4-4ad7-ba82-2cd2f41ce5e9": { "type": "String", "defaultValue": "enabled", "allowedValues": [ "enabled", "disabled" ], "metadata": { "displayName": "Required auditing setting for SQL servers" } }, "effect-0a370ff3-6cab-4e85-8995-295fd854c5b8": { "type": "String", "defaultValue": "Audit", "allowedValues": [ "Audit", "Deny", "Disabled" ], "metadata": { "displayName": "Effect for policy: SQL servers should use customer-managed keys to encrypt data at rest", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-ca91455f-eace-4f96-be59-e6e2c35b4816": { "type": "String", "defaultValue": "Audit", "allowedValues": [ "Audit", "Deny", "Disabled" ], "metadata": { "displayName": "Effect for policy: Managed disks should be double encrypted with both platform-managed and customer-managed keys", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-5e1de0e3-42cb-4ebc-a86d-61d0c619ca48": { "type": "String", "defaultValue": "Audit", "allowedValues": [ "Audit", "Deny", "Disabled" ], "metadata": { "displayName": "Effect for policy: Public network access should be disabled for PostgreSQL flexible servers", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-24fba194-95d6-48c0-aea7-f65bf859c598": { "type": "String", "defaultValue": "Audit", "allowedValues": [ "Audit", "Deny", "Disabled" ], "metadata": { "displayName": "Effect for policy: Infrastructure encryption should be enabled for Azure Database for PostgreSQL servers", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-b52376f7-9612-48a1-81cd-1ffe4b61032c": { "type": "String", "defaultValue": "Audit", "allowedValues": [ "Audit", "Deny", "Disabled" ], "metadata": { "displayName": "Effect for policy: Public network access should be disabled for PostgreSQL servers", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-fe83a0eb-a853-422d-aac2-1bffd182c5d0": { "type": "String", "defaultValue": "Audit", "allowedValues": [ "Audit", "Deny", "Disabled" ], "metadata": { "displayName": "Effect for policy: Storage accounts should have the specified minimum TLS version", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-1b8ca024-1d5c-4dec-8995-b1a932b41780": { "type": "String", "defaultValue": "Audit", "allowedValues": [ "Audit", "Deny", "Disabled" ], "metadata": { "displayName": "Effect for policy: Public network access on Azure SQL Database should be disabled", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-ac01ad65-10e5-46df-bdd9-6b0cad13e1d2": { "type": "String", "defaultValue": "Audit", "allowedValues": [ "Audit", "Deny", "Disabled" ], "metadata": { "displayName": "Effect for policy: SQL managed instances should use customer-managed keys to encrypt data at rest", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-1f314764-cb73-4fc9-b863-8eca98ac36e9": { "type": "String", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: An Azure Active Directory administrator should be provisioned for SQL servers", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-17k78e20-9358-41c9-923c-fb736d382a12": { "type": "String", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: Transparent Data Encryption on SQL databases should be enabled", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-89099bee-89e0-4b26-a5f4-165451757743": { "type": "String", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: SQL servers should be configured with 90 days auditing retention or higher.", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9": { "type": "String", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: Advanced data security should be enabled on your SQL servers", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-abfb7388-5bf4-4ad7-ba99-2cd2f41cebb9": { "type": "String", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: Advanced data security should be enabled on SQL Managed Instance", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-ef2a8f2a-b3d9-49cd-a8a8-9a3aaaf647d9": { "type": "String", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: Vulnerability assessment should be enabled on your SQL servers", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-1b7aa243-30e4-4c9e-bca8-d0d3022b634a": { "type": "String", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: Vulnerability assessment should be enabled on SQL Managed Instance", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-d158790f-bfb0-486c-8631-2dc6b4e8e6af": { "type": "String", "defaultValue": "Audit", "allowedValues": [ "Audit", "Disabled" ], "metadata": { "displayName": "Effect for policy: Enforce SSL connection should be enabled for PostgreSQL database servers", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-eb6f77b9-bd53-4e35-a23d-7f65d5f0e43d": { "type": "String", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: Log checkpoints should be enabled for PostgreSQL database servers", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-eb6f77b9-bd53-4e35-a23d-7f65d5f0e442": { "type": "String", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: Log connections should be enabled for PostgreSQL database servers", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-eb6f77b9-bd53-4e35-a23d-7f65d5f0e446": { "type": "String", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: Disconnections should be logged for PostgreSQL database servers.", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-5345bb39-67dc-4960-a1bf-427e16b9a0bd": { "type": "String", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: Connection throttling should be enabled for PostgreSQL database servers", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-cf820ca0-f99e-4f3e-84fb-66e913812d21": { "type": "String", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: Resource logs in Key Vault should be enabled", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "requiredRetentionDays": { "type": "String", "defaultValue": "365", "metadata": { "displayName": "Required retention period (days) for resource logs", "description": "For more information about resource logs, visit https://aka.ms/resourcelogs" } }, "effect-91a78b24-f231-4a8a-8da9-02c35b2b6510": { "type": "String", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: Resource logs in App Services should be enabled", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-428256e6-1fac-4f48-a757-df34c2b3336d": { "type": "String", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: Resource logs in Batch accounts should be enabled", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-057ef27e-665e-4328-8ea3-04b3122bd9fb": { "type": "String", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: Resource logs in Azure Data Lake Store should be enabled", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-c95c74d9-38fe-4f0d-af86-0c7d626a315c": { "type": "String", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: Resource logs in Data Lake Analytics should be enabled", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-83a214f7-d01a-484b-91a9-ed54470c9a6a": { "type": "String", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: Resource logs in Event Hub should be enabled", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-383856f8-de7f-44a2-81fc-e5135b5c2aa4": { "type": "String", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: Resource logs in IoT Hub should be enabled", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-34f95f76-5386-4de7-b824-0d8478470c9d": { "type": "String", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: Resource logs in Logic Apps should be enabled", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-b4330a05-a843-4bc8-bf9a-cacce50c67f4": { "type": "String", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: Resource logs in Search services should be enabled", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-f8d36e2f-389b-4ee4-898d-21aeb69a0f45": { "type": "String", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: Resource logs in Service Bus should be enabled", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-f9be5368-9bf5-4b84-9e0a-7850da98bb46": { "type": "String", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: Resource logs in Azure Stream Analytics should be enabled", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-fbb99e8e-e444-4da0-9ff1-75c92f5a85b2": { "type": "String", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: Storage account containing the container with activity logs must be encrypted with BYOK", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-27960feb-a23c-4577-8d36-ef8b5f35e0be": { "type": "String", "defaultValue": "Audit", "allowedValues": [ "Audit", "Disabled" ], "metadata": { "displayName": "Effect for policy: All flow log resources should be in enabled state", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-c251913d-7d24-4958-af87-478ed3b9ba41": { "type": "String", "defaultValue": "Audit", "allowedValues": [ "Audit", "Disabled" ], "metadata": { "displayName": "Effect for policy: Flow logs should be configured for every network security group", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-4c3c6c5f-0d47-4402-99b8-aa543dd8bcee": { "type": "String", "defaultValue": "Audit", "allowedValues": [ "Audit", "Disabled" ], "metadata": { "displayName": "Effect for policy: Flow logs should be configured for every virtual network", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-c5447c04-a4d7-4ba8-a263-c9ee321a6858-MicrosoftAuthorization-policyAssignments-write": { "type": "String", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: An activity log alert should exist for specific Policy operations (Microsoft.Authorization/policyAssignments/write)", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-c5447c04-a4d7-4ba8-a263-c9ee321a6858-MicrosoftAuthorization-policyAssignments-delete": { "type": "String", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: An activity log alert should exist for specific Policy operations (Microsoft.Authorization/policyAssignments/delete)", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-b954148f-4c11-4c38-8221-be76711e194a-MicrosoftNetwork-networkSecurityGroups-write": { "type": "String", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.Network/networkSecurityGroups/write)", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-b954148f-4c11-4c38-8221-be76711e194a-MicrosoftNetwork-networkSecurityGroups-delete": { "type": "String", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.Network/networkSecurityGroups/delete)", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-b954148f-4c11-4c38-8221-be76711e194a-MicrosoftNetwork-networkSecurityGroups-securityRules-write": { "type": "String", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.Network/networkSecurityGroups/securityRules/write)", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-b954148f-4c11-4c38-8221-be76711e194a-MicrosoftNetwork-networkSecurityGroups-securityRules-delete": { "type": "String", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.Network/networkSecurityGroups/securityRules/delete)", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-b954148f-4c11-4c38-8221-be76711e194a-MicrosoftSql-servers-firewallRules-write": { "type": "String", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.Sql/servers/firewallRules/write)", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-b954148f-4c11-4c38-8221-be76711e194a-MicrosoftSql-servers-firewallRules-delete": { "type": "String", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.Sql/servers/firewallRules/delete)", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-b954148f-4c11-4c38-8221-be76711e194a-MicrosoftClassicNetwork-networkSecurityGroups-write": { "type": "String", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/write)", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-b954148f-4c11-4c38-8221-be76711e194a-MicrosoftClassicNetwork-networkSecurityGroups-delete": { "type": "String", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/delete)", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-b954148f-4c11-4c38-8221-be76711e194a-MicrosoftClassicNetwork-networkSecurityGroups-securityRules-write": { "type": "String", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write)", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-b954148f-4c11-4c38-8221-be76711e194a-MicrosoftClassicNetwork-networkSecurityGroups-securityRules-delete": { "type": "String", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: An activity log alert should exist for specific Administrative operations (Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/delete)", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-22730e10-96f6-4aac-ad84-9383d35b5917": { "type": "String", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: Management ports should be closed on your virtual machines", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "resourceGroupName-b6e2945c-0b7b-40f5-9233-7a5323b5cdc6": { "type": "String", "defaultValue": "NetworkWatcherRG", "metadata": { "displayName": "Name of the resource group for Network Watcher", "description": "Name of the resource group where Network Watchers are located" } }, "effect-0961003e-5a0a-4549-abde-af6a37f2724d": { "type": "String", "defaultValue": "Disabled", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: Virtual machines should encrypt temp disks, caches, and data flows between Compute and Storage resources", "description": "For more information about effects, visit https://aka.ms/policyeffects", "deprecated": true } }, "effect-c0e996f8-39cf-4af9-9f45-83fbde810432": { "type": "String", "defaultValue": "Audit", "allowedValues": [ "Audit", "Deny", "Disabled" ], "metadata": { "displayName": "Effect for policy: Only approved VM extensions should be installed", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "approvedExtensions-c0e996f8-39cf-4af9-9f45-83fbde810432": { "type": "Array", "defaultValue": [ "AzureDiskEncryption", "AzureDiskEncryptionForLinux", "DependencyAgentWindows", "DependencyAgentLinux", "IaaSAntimalware", "IaaSDiagnostics", "LinuxDiagnostic", "MicrosoftMonitoringAgent", "NetworkWatcherAgentLinux", "NetworkWatcherAgentWindows", "OmsAgentForLinux", "VMSnapshot", "VMSnapshotLinux" ], "metadata": { "displayName": "List of virtual machine extensions that are approved for use", "description": "A semicolon-separated list of virtual machine extensions; to see a complete list of extensions, use the Azure PowerShell command Get-AzVMExtensionImage" } }, "effect-1f7c564c-0a90-4d44-b7e1-9d456cffaee8": { "type": "String", "defaultValue": "Disabled", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: Endpoint protection should be installed on your machines", "description": "For more information about effects, visit https://aka.ms/policyeffects", "deprecated": true } }, "effect-152b15f7-8e1f-4c1f-ab71-8c010ba5dbc0": { "type": "String", "defaultValue": "Audit", "allowedValues": [ "Audit", "Deny", "Disabled" ], "metadata": { "displayName": "Effect for policy: Keys should have expiration dates set", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-98728c90-32c7-4049-8429-847dc0f4fe37": { "type": "String", "defaultValue": "Audit", "allowedValues": [ "Audit", "Deny", "Disabled" ], "metadata": { "displayName": "Effect for policy: Secrets should have expiration dates set", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-0b60c0b2-2dc2-4e1c-b5c9-abbed971de53": { "type": "String", "defaultValue": "Audit", "allowedValues": [ "Audit", "Deny", "Disabled" ], "metadata": { "displayName": "Effect for policy: Key vault should have purge protection enabled", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-1e66c121-a66a-4b1f-9b83-0fd99bf0fc2d": { "type": "String", "defaultValue": "Audit", "allowedValues": [ "Audit", "Deny", "Disabled" ], "metadata": { "displayName": "Effect for policy: Key vaults should have soft delete enabled", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-12d4fa5e-1f9f-4c21-97a9-b99b3c6611b5": { "type": "String", "defaultValue": "Audit", "allowedValues": [ "Audit", "Deny", "Disabled" ], "metadata": { "displayName": "Effect for policy: Azure Key Vault should use RBAC permission model", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "audit_effect-a6abeaec-4d90-4a02-805f-6b26c4d3fbe9": { "type": "String", "defaultValue": "Audit", "allowedValues": [ "Audit", "Disabled" ], "metadata": { "displayName": "Audit effect for policy: Azure Key Vaults should use private link" } }, "effect-d8cf8476-a2ec-4916-896e-992351803c44": { "type": "String", "defaultValue": "Audit", "allowedValues": [ "Audit", "Disabled" ], "metadata": { "displayName": "Effect for policy: Keys should have a rotation policy ensuring that their rotation is scheduled within the specified number of days after creation.", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "maximumDaysToRotate-d8cf8476-a2ec-4916-896e-992351803c44": { "type": "Integer", "metadata": { "displayName": "The maximum days to rotate Key" } }, "effect-c75248c1-ea1d-4a9c-8fc9-29a6aabd5da8": { "type": "String", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: Authentication should be enabled on your Function app", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-5450f5bd-9c72-4390-a9c4-a7aba4edfdd2": { "type": "String", "defaultValue": "Audit", "allowedValues": [ "Audit", "Deny", "Disabled" ], "metadata": { "displayName": "Effect for policy: Cosmos DB database accounts should have local authentication methods disabled", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-95bccee9-a7f8-4bec-9ee9-62c3473701fc": { "type": "String", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: Authentication should be enabled on your web app", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-a4af4a39-4135-47fb-b175-47fbdf85311d": { "type": "String", "defaultValue": "Audit", "allowedValues": [ "Audit", "Disabled" ], "metadata": { "displayName": "Effect for policy: Web Application should only be accessible over HTTPS", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-f9d614c5-c173-4d56-95a7-b4437057d193": { "type": "String", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: Latest TLS version should be used in your Function App", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-f0e6e85b-9b9f-4a4b-b67b-f730d42f1b0b": { "type": "String", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: Latest TLS version should be used in your Web App", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-eaebaea7-8013-4ceb-9d14-7eb32271373c": { "type": "String", "defaultValue": "Audit", "allowedValues": [ "Audit", "Disabled" ], "metadata": { "displayName": "Effect for policy: Ensure Function app has 'Client Certificates (Incoming client certificates)' set to 'On'", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-5bb220d9-2698-4ee4-8404-b9c30c9df609": { "type": "String", "defaultValue": "Audit", "allowedValues": [ "Audit", "Disabled" ], "metadata": { "displayName": "Effect for policy: Ensure WEB app has 'Client Certificates (Incoming client certificates)' set to 'On'", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-0da106f2-4ca3-48e8-bc85-c638fe6aea8f": { "type": "String", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: Managed identity should be used in your Function App", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-2b9ad585-36bc-4615-b300-fd4435808332": { "type": "String", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: Managed identity should be used in your Web App", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-f466b2a6-823d-470d-8ea5-b031e72d79ae": { "type": "String", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: App Service app slots that use PHP should use a specified 'PHP version'", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "LinuxPHPVersion": { "type": "String", "defaultValue": "", "metadata": { "displayName": "Specify a supported PHP version for App Service" } }, "effect-7261b898-8a84-4db8-9e04-18527132abb3": { "type": "String", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: App Service apps that use PHP should use a specified 'PHP version'", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-9c014953-ef68-4a98-82af-fd0f6b2306c8": { "type": "String", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: App Service app slots that use Python should use a specified 'Python version'", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "LinuxPythonVersion": { "type": "String", "defaultValue": "", "metadata": { "displayName": "Linux Python version" } }, "effect-7008174a-fd10-4ef0-817e-fc820a951d73": { "type": "String", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: App Service apps that use Python should use a specified 'Python version'", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-e1d1b522-02b0-4d18-a04f-5ab62d20445f": { "type": "String", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: Function app slots that use Java should use a specified 'Java version'", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "LinuxJavaVersion": { "type": "String", "defaultValue": "", "metadata": { "displayName": "Linux Java version" } }, "effect-9d0b6ea4-93e2-4578-bf2f-6bb17d22b4bc": { "type": "String", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: Function apps that use Java should use a specified 'Java version'", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-e2c1c086-2d84-4019-bff3-c44ccd95113c": { "type": "String", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: Function apps should use latest 'HTTP Version'", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-8c122334-9d20-4eb8-89ea-ac9a705b74ae": { "type": "String", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: App Service apps should use latest 'HTTP Version'", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-399b2637-a50f-4f95-96f8-3a145476eb15": { "type": "String", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: Function apps should require FTPS only", "description": "For more information about effects, visit https://aka.ms/policyeffects" } }, "effect-4d24b6d4-5e53-4a4f-a7f4-618fa573ee4b": { "type": "String", "defaultValue": "AuditIfNotExists", "allowedValues": [ "AuditIfNotExists", "Disabled" ], "metadata": { "displayName": "Effect for policy: App Service apps should require FTPS only", "description": "For more information about effects, visit https://aka.ms/policyeffects" } } }, "policyDefinitions": [ { "policyDefinitionReferenceId": "49c23d9b-02b0-0e42-4f94-e8cef1b8381b", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/49c23d9b-02b0-0e42-4f94-e8cef1b8381b", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_1.5", "CIS_Azure_2.0.0_3.5", "CIS_Azure_2.0.0_3.13", "CIS_Azure_2.0.0_3.14", "CIS_Azure_2.0.0_4.1.1", "CIS_Azure_2.0.0_4.3.2", "CIS_Azure_2.0.0_4.3.3", "CIS_Azure_2.0.0_4.3.4", "CIS_Azure_2.0.0_4.3.5", "CIS_Azure_2.0.0_5.4", "CIS_Azure_2.0.0_5.1.2", "CIS_Azure_2.0.0_5.1.5" ] }, { "policyDefinitionReferenceId": "5e1de0e3-42cb-4ebc-a86d-61d0c619ca48", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5e1de0e3-42cb-4ebc-a86d-61d0c619ca48", "definitionVersion": "3.*.*", "parameters": { "effect": { "value": "[parameters('effect-5e1de0e3-42cb-4ebc-a86d-61d0c619ca48')]" } }, "groupNames": [ "CIS_Azure_2.0.0_4.3.7" ] }, { "policyDefinitionReferenceId": "feedbf84-6b99-488c-acc2-71c829aa5ffc", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/feedbf84-6b99-488c-acc2-71c829aa5ffc", "definitionVersion": "4.*.*", "parameters": { "effect": { "value": "[parameters('effect-feedbf84-6b99-488c-acc2-71c829aa5ffc')]" } }, "groupNames": [ "CIS_Azure_2.0.0_4.2.5" ] }, { "policyDefinitionReferenceId": "ca91455f-eace-4f96-be59-e6e2c35b4816", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ca91455f-eace-4f96-be59-e6e2c35b4816", "definitionVersion": "1.*.*", "parameters": { "effect": { "value": "[parameters('effect-ca91455f-eace-4f96-be59-e6e2c35b4816')]" } }, "groupNames": [ "CIS_Azure_2.0.0_7.4" ] }, { "policyDefinitionReferenceId": "3b980d31-7904-4bb7-8575-5665739a8052-0", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3b980d31-7904-4bb7-8575-5665739a8052", "definitionVersion": "1.*.*", "parameters": { "effect": { "value": "[parameters('effect-3b980d31-7904-4bb7-8575-5665739a8052')]" }, "operationName": { "value": "Microsoft.Security/policies/write" } }, "groupNames": [ "CIS_Azure_2.0.0_5.1.2" ] }, { "policyDefinitionReferenceId": "3b980d31-7904-4bb7-8575-5665739a8052-1", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3b980d31-7904-4bb7-8575-5665739a8052", "definitionVersion": "1.*.*", "parameters": { "effect": { "value": "[parameters('effect-3b980d31-7904-4bb7-8575-5665739a8052')]" }, "operationName": { "value": "Microsoft.Security/securitySolutions/write" } }, "groupNames": [ "CIS_Azure_2.0.0_5.1.2" ] }, { "policyDefinitionReferenceId": "3b980d31-7904-4bb7-8575-5665739a8052-2", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3b980d31-7904-4bb7-8575-5665739a8052", "definitionVersion": "1.*.*", "parameters": { "effect": { "value": "[parameters('effect-3b980d31-7904-4bb7-8575-5665739a8052')]" }, "operationName": { "value": "Microsoft.Security/securitySolutions/delete" } }, "groupNames": [ "CIS_Azure_2.0.0_5.1.2" ] }, { "policyDefinitionReferenceId": "a451c1ef-c6ca-483d-87ed-f49761e3ffb5", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a451c1ef-c6ca-483d-87ed-f49761e3ffb5", "definitionVersion": "1.*.*", "parameters": { "effect": { "value": "[parameters('effect-a451c1ef-c6ca-483d-87ed-f49761e3ffb5')]" } }, "groupNames": [ "CIS_Azure_2.0.0_1.23" ] }, { "policyDefinitionReferenceId": "fe83a0eb-a853-422d-aac2-1bffd182c5d0", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/fe83a0eb-a853-422d-aac2-1bffd182c5d0", "definitionVersion": "1.*.*", "parameters": { "effect": { "value": "[parameters('effect-fe83a0eb-a853-422d-aac2-1bffd182c5d0')]" } }, "groupNames": [ "CIS_Azure_2.0.0_3.15" ] }, { "policyDefinitionReferenceId": "e802a67a-daf5-4436-9ea6-f6d821dd0c5d", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e802a67a-daf5-4436-9ea6-f6d821dd0c5d", "definitionVersion": "1.*.*", "parameters": { "effect": { "value": "[parameters('effect-e802a67a-daf5-4436-9ea6-f6d821dd0c5d')]" } }, "groupNames": [ "CIS_Azure_2.0.0_4.4.1" ] }, { "policyDefinitionReferenceId": "24fba194-95d6-48c0-aea7-f65bf859c598", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/24fba194-95d6-48c0-aea7-f65bf859c598", "definitionVersion": "1.*.*", "parameters": { "effect": { "value": "[parameters('effect-24fba194-95d6-48c0-aea7-f65bf859c598')]" } }, "groupNames": [ "CIS_Azure_2.0.0_4.3.8" ] }, { "policyDefinitionReferenceId": "1b8ca024-1d5c-4dec-8995-b1a932b41780", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1b8ca024-1d5c-4dec-8995-b1a932b41780", "definitionVersion": "1.*.*", "parameters": { "effect": { "value": "[parameters('effect-1b8ca024-1d5c-4dec-8995-b1a932b41780')]" } }, "groupNames": [ "CIS_Azure_2.0.0_4.1.2" ] }, { "policyDefinitionReferenceId": "b52376f7-9612-48a1-81cd-1ffe4b61032c", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b52376f7-9612-48a1-81cd-1ffe4b61032c", "definitionVersion": "2.*.*", "parameters": { "effect": { "value": "[parameters('effect-b52376f7-9612-48a1-81cd-1ffe4b61032c')]" } }, "groupNames": [ "CIS_Azure_2.0.0_4.3.7" ] }, { "policyDefinitionReferenceId": "a830fe9e-08c9-a4fb-420c-6f6bf1702395", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a830fe9e-08c9-a4fb-420c-6f6bf1702395", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_1.5" ] }, { "policyDefinitionReferenceId": "79f081c7-1634-01a1-708e-376197999289", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/79f081c7-1634-01a1-708e-376197999289", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_1.5" ] }, { "policyDefinitionReferenceId": "f96d2186-79df-262d-3f76-f371e3b71798", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f96d2186-79df-262d-3f76-f371e3b71798", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_1.5" ] }, { "policyDefinitionReferenceId": "7805a343-275c-41be-9d62-7215b96212d8", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7805a343-275c-41be-9d62-7215b96212d8", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_1.5" ] }, { "policyDefinitionReferenceId": "e9ac8f8e-ce22-4355-8f04-99b911d6be52", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e9ac8f8e-ce22-4355-8f04-99b911d6be52", "definitionVersion": "1.*.*", "parameters": { "effect": { "value": "[parameters('effect-e9ac8f8e-ce22-4355-8f04-99b911d6be52')]" } }, "groupNames": [ "CIS_Azure_2.0.0_1.5" ] }, { "policyDefinitionReferenceId": "94e1c2ac-cbbe-4cac-a2b5-389c812dee87", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/94e1c2ac-cbbe-4cac-a2b5-389c812dee87", "definitionVersion": "1.*.*", "parameters": { "effect": { "value": "[parameters('effect-94e1c2ac-cbbe-4cac-a2b5-389c812dee87')]" } }, "groupNames": [ "CIS_Azure_2.0.0_1.5" ] }, { "policyDefinitionReferenceId": "339353f6-2387-4a45-abe4-7f529d121046", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/339353f6-2387-4a45-abe4-7f529d121046", "definitionVersion": "1.*.*", "parameters": { "effect": { "value": "[parameters('effect-339353f6-2387-4a45-abe4-7f529d121046')]" } }, "groupNames": [ "CIS_Azure_2.0.0_1.5" ] }, { "policyDefinitionReferenceId": "2cc9c165-46bd-9762-5739-d2aae5ba90a1", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2cc9c165-46bd-9762-5739-d2aae5ba90a1", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_1.8", "CIS_Azure_2.0.0_1.9", "CIS_Azure_2.0.0_1.10", "CIS_Azure_2.0.0_4.1.4", "CIS_Azure_2.0.0_9.5" ] }, { "policyDefinitionReferenceId": "34d38ea7-6754-1838-7031-d7fd07099821", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/34d38ea7-6754-1838-7031-d7fd07099821", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_1.8", "CIS_Azure_2.0.0_1.9", "CIS_Azure_2.0.0_1.10", "CIS_Azure_2.0.0_4.1.4", "CIS_Azure_2.0.0_9.5" ] }, { "policyDefinitionReferenceId": "48c816c5-2190-61fc-8806-25d6f3df162f", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/48c816c5-2190-61fc-8806-25d6f3df162f", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_1.8", "CIS_Azure_2.0.0_1.9", "CIS_Azure_2.0.0_1.10", "CIS_Azure_2.0.0_4.1.4", "CIS_Azure_2.0.0_9.5" ] }, { "policyDefinitionReferenceId": "8489ff90-8d29-61df-2d84-f9ab0f4c5e84", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8489ff90-8d29-61df-2d84-f9ab0f4c5e84", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_1.8", "CIS_Azure_2.0.0_1.9", "CIS_Azure_2.0.0_1.10", "CIS_Azure_2.0.0_4.1.4", "CIS_Azure_2.0.0_9.5" ] }, { "policyDefinitionReferenceId": "e4b00788-7e1c-33ec-0418-d048508e095b", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e4b00788-7e1c-33ec-0418-d048508e095b", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_1.9", "CIS_Azure_2.0.0_1.10" ] }, { "policyDefinitionReferenceId": "f26af0b1-65b6-689a-a03f-352ad2d00f98", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f26af0b1-65b6-689a-a03f-352ad2d00f98", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_1.10", "CIS_Azure_2.0.0_3.5", "CIS_Azure_2.0.0_3.13", "CIS_Azure_2.0.0_3.14", "CIS_Azure_2.0.0_4.1.1", "CIS_Azure_2.0.0_4.3.2", "CIS_Azure_2.0.0_4.3.3", "CIS_Azure_2.0.0_4.3.4", "CIS_Azure_2.0.0_4.3.5", "CIS_Azure_2.0.0_5.4", "CIS_Azure_2.0.0_5.1.2", "CIS_Azure_2.0.0_5.1.5" ] }, { "policyDefinitionReferenceId": "ed87d27a-9abf-7c71-714c-61d881889da4", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ed87d27a-9abf-7c71-714c-61d881889da4", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_1.10" ] }, { "policyDefinitionReferenceId": "873895e8-0e3a-6492-42e9-22cd030e9fcd", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/873895e8-0e3a-6492-42e9-22cd030e9fcd", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_1.10" ] }, { "policyDefinitionReferenceId": "e714b481-8fac-64a2-14a9-6f079b2501a4", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e714b481-8fac-64a2-14a9-6f079b2501a4", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_1.10" ] }, { "policyDefinitionReferenceId": "aeed863a-0f56-429f-945d-8bb66bd06841", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/aeed863a-0f56-429f-945d-8bb66bd06841", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_1.11", "CIS_Azure_2.0.0_1.13", "CIS_Azure_2.0.0_1.14", "CIS_Azure_2.0.0_1.15", "CIS_Azure_2.0.0_1.16", "CIS_Azure_2.0.0_1.17", "CIS_Azure_2.0.0_1.18", "CIS_Azure_2.0.0_1.19", "CIS_Azure_2.0.0_1.20", "CIS_Azure_2.0.0_1.21", "CIS_Azure_2.0.0_1.23", "CIS_Azure_2.0.0_1.24", "CIS_Azure_2.0.0_3.7" ] }, { "policyDefinitionReferenceId": "50e9324a-7410-0539-0662-2c1e775538b7", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/50e9324a-7410-0539-0662-2c1e775538b7", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_1.11", "CIS_Azure_2.0.0_1.13", "CIS_Azure_2.0.0_1.14", "CIS_Azure_2.0.0_1.15", "CIS_Azure_2.0.0_1.16", "CIS_Azure_2.0.0_1.17", "CIS_Azure_2.0.0_1.18", "CIS_Azure_2.0.0_1.19", "CIS_Azure_2.0.0_1.20", "CIS_Azure_2.0.0_1.21", "CIS_Azure_2.0.0_1.23", "CIS_Azure_2.0.0_1.24", "CIS_Azure_2.0.0_3.7" ] }, { "policyDefinitionReferenceId": "b1666a13-8f67-9c47-155e-69e027ff6823", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b1666a13-8f67-9c47-155e-69e027ff6823", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_1.11", "CIS_Azure_2.0.0_1.13", "CIS_Azure_2.0.0_1.14", "CIS_Azure_2.0.0_1.15", "CIS_Azure_2.0.0_1.16", "CIS_Azure_2.0.0_1.17", "CIS_Azure_2.0.0_1.18", "CIS_Azure_2.0.0_1.19", "CIS_Azure_2.0.0_1.20", "CIS_Azure_2.0.0_1.21", "CIS_Azure_2.0.0_1.23", "CIS_Azure_2.0.0_1.24", "CIS_Azure_2.0.0_3.7" ] }, { "policyDefinitionReferenceId": "10c4210b-3ec9-9603-050d-77e4d26c7ebb", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/10c4210b-3ec9-9603-050d-77e4d26c7ebb", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_1.15", "CIS_Azure_2.0.0_1.16", "CIS_Azure_2.0.0_1.17", "CIS_Azure_2.0.0_3.7" ] }, { "policyDefinitionReferenceId": "de770ba6-50dd-a316-2932-e0d972eaa734", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/de770ba6-50dd-a316-2932-e0d972eaa734", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_1.15", "CIS_Azure_2.0.0_1.16", "CIS_Azure_2.0.0_1.17", "CIS_Azure_2.0.0_3.7" ] }, { "policyDefinitionReferenceId": "eb1c944e-0e94-647b-9b7e-fdb8d2af0838", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/eb1c944e-0e94-647b-9b7e-fdb8d2af0838", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_1.15", "CIS_Azure_2.0.0_1.16", "CIS_Azure_2.0.0_1.17", "CIS_Azure_2.0.0_3.7" ] }, { "policyDefinitionReferenceId": "03b6427e-6072-4226-4bd9-a410ab65317e", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/03b6427e-6072-4226-4bd9-a410ab65317e", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_1.15", "CIS_Azure_2.0.0_1.16", "CIS_Azure_2.0.0_1.23" ] }, { "policyDefinitionReferenceId": "1bc7fd64-291f-028e-4ed6-6e07886e163f", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1bc7fd64-291f-028e-4ed6-6e07886e163f", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_1.15", "CIS_Azure_2.0.0_1.16", "CIS_Azure_2.0.0_1.23" ] }, { "policyDefinitionReferenceId": "7d7a8356-5c34-9a95-3118-1424cfaf192a", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7d7a8356-5c34-9a95-3118-1424cfaf192a", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_1.22", "CIS_Azure_2.0.0_1.1.1", "CIS_Azure_2.0.0_1.1.2", "CIS_Azure_2.0.0_1.1.3", "CIS_Azure_2.0.0_1.1.4" ] }, { "policyDefinitionReferenceId": "ae5345d5-8dab-086a-7290-db43a3272198", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ae5345d5-8dab-086a-7290-db43a3272198", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_1.22", "CIS_Azure_2.0.0_1.1.1", "CIS_Azure_2.0.0_1.1.4" ] }, { "policyDefinitionReferenceId": "056a723b-4946-9d2a-5243-3aa27c4d31a1", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/056a723b-4946-9d2a-5243-3aa27c4d31a1", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_1.22", "CIS_Azure_2.0.0_1.1.1", "CIS_Azure_2.0.0_1.1.4" ] }, { "policyDefinitionReferenceId": "dad8a2e9-6f27-4fc2-8933-7e99fe700c9c", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/dad8a2e9-6f27-4fc2-8933-7e99fe700c9c", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_1.22", "CIS_Azure_2.0.0_1.1.1" ] }, { "policyDefinitionReferenceId": "83dfb2b8-678b-20a0-4c44-5c75ada023e6", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/83dfb2b8-678b-20a0-4c44-5c75ada023e6", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_1.22", "CIS_Azure_2.0.0_1.1.1" ] }, { "policyDefinitionReferenceId": "3d492600-27ba-62cc-a1c3-66eb919f6a0d", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3d492600-27ba-62cc-a1c3-66eb919f6a0d", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_1.22", "CIS_Azure_2.0.0_1.1.1" ] }, { "policyDefinitionReferenceId": "cd36eeec-67e7-205a-4b64-dbfe3b4e3e4e", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/cd36eeec-67e7-205a-4b64-dbfe3b4e3e4e", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_1.22", "CIS_Azure_2.0.0_1.1.1" ] }, { "policyDefinitionReferenceId": "518eafdd-08e5-37a9-795b-15a8d798056d", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/518eafdd-08e5-37a9-795b-15a8d798056d", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_1.22", "CIS_Azure_2.0.0_1.1.1" ] }, { "policyDefinitionReferenceId": "3d399cf3-8fc6-0efc-6ab0-1412f1198517", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3d399cf3-8fc6-0efc-6ab0-1412f1198517", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_2.1.1", "CIS_Azure_2.0.0_2.1.2", "CIS_Azure_2.0.0_2.1.4", "CIS_Azure_2.0.0_2.1.5", "CIS_Azure_2.0.0_2.1.7", "CIS_Azure_2.0.0_2.1.8", "CIS_Azure_2.0.0_2.1.10", "CIS_Azure_2.0.0_2.1.17", "CIS_Azure_2.0.0_2.1.21", "CIS_Azure_2.0.0_2.1.22", "CIS_Azure_2.0.0_7.6" ] }, { "policyDefinitionReferenceId": "63f63e71-6c3f-9add-4c43-64de23e554a7", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/63f63e71-6c3f-9add-4c43-64de23e554a7", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_2.1.1", "CIS_Azure_2.0.0_2.1.2", "CIS_Azure_2.0.0_2.1.4", "CIS_Azure_2.0.0_2.1.5", "CIS_Azure_2.0.0_2.1.7", "CIS_Azure_2.0.0_2.1.8", "CIS_Azure_2.0.0_2.1.10", "CIS_Azure_2.0.0_2.1.17", "CIS_Azure_2.0.0_2.1.21", "CIS_Azure_2.0.0_2.1.22", "CIS_Azure_2.0.0_7.6" ] }, { "policyDefinitionReferenceId": "4a6f5cbd-6c6b-006f-2bb1-091af1441bce", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4a6f5cbd-6c6b-006f-2bb1-091af1441bce", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_2.1.1", "CIS_Azure_2.0.0_2.1.2", "CIS_Azure_2.0.0_2.1.4", "CIS_Azure_2.0.0_2.1.5", "CIS_Azure_2.0.0_2.1.7", "CIS_Azure_2.0.0_2.1.8", "CIS_Azure_2.0.0_2.1.10", "CIS_Azure_2.0.0_2.1.17", "CIS_Azure_2.0.0_2.1.21", "CIS_Azure_2.0.0_2.1.22", "CIS_Azure_2.0.0_7.6" ] }, { "policyDefinitionReferenceId": "fad161f5-5261-401a-22dd-e037bae011bd", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/fad161f5-5261-401a-22dd-e037bae011bd", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_2.1.1", "CIS_Azure_2.0.0_2.1.2", "CIS_Azure_2.0.0_2.1.4", "CIS_Azure_2.0.0_2.1.5", "CIS_Azure_2.0.0_2.1.7", "CIS_Azure_2.0.0_2.1.8", "CIS_Azure_2.0.0_2.1.10", "CIS_Azure_2.0.0_2.1.17", "CIS_Azure_2.0.0_2.1.21", "CIS_Azure_2.0.0_2.1.22", "CIS_Azure_2.0.0_7.6" ] }, { "policyDefinitionReferenceId": "ea9d7c95-2f10-8a4d-61d8-7469bd2e8d65", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ea9d7c95-2f10-8a4d-61d8-7469bd2e8d65", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_2.1.1", "CIS_Azure_2.0.0_2.1.2", "CIS_Azure_2.0.0_2.1.4", "CIS_Azure_2.0.0_2.1.5", "CIS_Azure_2.0.0_2.1.7", "CIS_Azure_2.0.0_2.1.8", "CIS_Azure_2.0.0_2.1.10", "CIS_Azure_2.0.0_2.1.17", "CIS_Azure_2.0.0_2.1.21", "CIS_Azure_2.0.0_2.1.22", "CIS_Azure_2.0.0_7.6" ] }, { "policyDefinitionReferenceId": "86ecd378-a3a0-5d5b-207c-05e6aaca43fc", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/86ecd378-a3a0-5d5b-207c-05e6aaca43fc", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_2.1.1", "CIS_Azure_2.0.0_2.1.2", "CIS_Azure_2.0.0_2.1.4", "CIS_Azure_2.0.0_2.1.5", "CIS_Azure_2.0.0_2.1.7", "CIS_Azure_2.0.0_2.1.8", "CIS_Azure_2.0.0_2.1.10", "CIS_Azure_2.0.0_2.1.17", "CIS_Azure_2.0.0_2.1.21", "CIS_Azure_2.0.0_2.1.22" ] }, { "policyDefinitionReferenceId": "4da35fc9-c9e7-4960-aec9-797fe7d9051d", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4da35fc9-c9e7-4960-aec9-797fe7d9051d", "definitionVersion": "1.*.*", "parameters": { "effect": { "value": "[parameters('effect-4da35fc9-c9e7-4960-aec9-797fe7d9051d')]" } }, "groupNames": [ "CIS_Azure_2.0.0_2.1.1" ] }, { "policyDefinitionReferenceId": "2913021d-f2fd-4f3d-b958-22354e2bdbcb", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2913021d-f2fd-4f3d-b958-22354e2bdbcb", "definitionVersion": "1.*.*", "parameters": { "effect": { "value": "[parameters('effect-2913021d-f2fd-4f3d-b958-22354e2bdbcb')]" } }, "groupNames": [ "CIS_Azure_2.0.0_2.1.2" ] }, { "policyDefinitionReferenceId": "0a9fbe0d-c5c4-4da8-87d8-f4fd77338835", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0a9fbe0d-c5c4-4da8-87d8-f4fd77338835", "definitionVersion": "1.*.*", "parameters": { "effect": { "value": "[parameters('effect-0a9fbe0d-c5c4-4da8-87d8-f4fd77338835')]" } }, "groupNames": [ "CIS_Azure_2.0.0_2.1.3", "CIS_Azure_2.0.0_2.1.6" ] }, { "policyDefinitionReferenceId": "7fe3b40f-802b-4cdd-8bd4-fd799c948cc2", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7fe3b40f-802b-4cdd-8bd4-fd799c948cc2", "definitionVersion": "1.*.*", "parameters": { "effect": { "value": "[parameters('effect-7fe3b40f-802b-4cdd-8bd4-fd799c948cc2')]" } }, "groupNames": [ "CIS_Azure_2.0.0_2.1.3", "CIS_Azure_2.0.0_2.1.4" ] }, { "policyDefinitionReferenceId": "6581d072-105e-4418-827f-bd446d56421b", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6581d072-105e-4418-827f-bd446d56421b", "definitionVersion": "1.*.*", "parameters": { "effect": { "value": "[parameters('effect-6581d072-105e-4418-827f-bd446d56421b')]" } }, "groupNames": [ "CIS_Azure_2.0.0_2.1.3", "CIS_Azure_2.0.0_2.1.5" ] }, { "policyDefinitionReferenceId": "640d2586-54d2-465f-877f-9ffc1d2109f4", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/640d2586-54d2-465f-877f-9ffc1d2109f4", "definitionVersion": "1.*.*", "parameters": { "effect": { "value": "[parameters('effect-640d2586-54d2-465f-877f-9ffc1d2109f4')]" } }, "groupNames": [ "CIS_Azure_2.0.0_2.1.7" ] }, { "policyDefinitionReferenceId": "1c988dd6-ade4-430f-a608-2a3e5b0a6d38", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1c988dd6-ade4-430f-a608-2a3e5b0a6d38", "definitionVersion": "1.*.*", "parameters": { "effect": { "value": "[parameters('effect-1c988dd6-ade4-430f-a608-2a3e5b0a6d38')]" } }, "groupNames": [ "CIS_Azure_2.0.0_2.1.8", "CIS_Azure_2.0.0_2.1.17" ] }, { "policyDefinitionReferenceId": "adbe85b5-83e6-4350-ab58-bf3a4f736e5e", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/adbe85b5-83e6-4350-ab58-bf3a4f736e5e", "definitionVersion": "1.*.*", "parameters": { "effect": { "value": "[parameters('effect-adbe85b5-83e6-4350-ab58-bf3a4f736e5e')]" } }, "groupNames": [ "CIS_Azure_2.0.0_2.1.3", "CIS_Azure_2.0.0_2.1.9" ] }, { "policyDefinitionReferenceId": "0e6763cc-5078-4e64-889d-ff4d9a839047", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0e6763cc-5078-4e64-889d-ff4d9a839047", "definitionVersion": "1.*.*", "parameters": { "effect": { "value": "[parameters('effect-0e6763cc-5078-4e64-889d-ff4d9a839047')]" } }, "groupNames": [ "CIS_Azure_2.0.0_2.1.10" ] }, { "policyDefinitionReferenceId": "bdc59948-5574-49b3-bb91-76b7c986428d", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/bdc59948-5574-49b3-bb91-76b7c986428d", "definitionVersion": "1.*.*", "parameters": { "effect": { "value": "[parameters('effect-bdc59948-5574-49b3-bb91-76b7c986428d')]" } }, "groupNames": [ "CIS_Azure_2.0.0_2.1.11" ] }, { "policyDefinitionReferenceId": "c3d20c29-b36d-48fe-808b-99a87530ad99", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c3d20c29-b36d-48fe-808b-99a87530ad99", "definitionVersion": "1.*.*", "parameters": { "effect": { "value": "[parameters('effect-c3d20c29-b36d-48fe-808b-99a87530ad99')]" } }, "groupNames": [ "CIS_Azure_2.0.0_2.1.12" ] }, { "policyDefinitionReferenceId": "bd876905-5b84-4f73-ab2d-2e7a7c4568d9", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/bd876905-5b84-4f73-ab2d-2e7a7c4568d9", "definitionVersion": "3.*.*-preview", "parameters": { "effect": { "value": "[parameters('effect-bd876905-5b84-4f73-ab2d-2e7a7c4568d9')]" } }, "groupNames": [ "CIS_Azure_2.0.0_2.1.13" ] }, { "policyDefinitionReferenceId": "b53aa659-513e-032c-52e6-1ce0ba46582f", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b53aa659-513e-032c-52e6-1ce0ba46582f", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_2.1.14" ] }, { "policyDefinitionReferenceId": "2f20840e-7925-221c-725d-757442753e7c", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2f20840e-7925-221c-725d-757442753e7c", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_2.1.14" ] }, { "policyDefinitionReferenceId": "058e9719-1ff9-3653-4230-23f76b6492e0", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/058e9719-1ff9-3653-4230-23f76b6492e0", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_2.1.14" ] }, { "policyDefinitionReferenceId": "7380631c-5bf5-0e3a-4509-0873becd8a63", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7380631c-5bf5-0e3a-4509-0873becd8a63", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_2.1.14" ] }, { "policyDefinitionReferenceId": "526ed90e-890f-69e7-0386-ba5c0f1f784f", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/526ed90e-890f-69e7-0386-ba5c0f1f784f", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_2.1.14" ] }, { "policyDefinitionReferenceId": "33832848-42ab-63f3-1a55-c0ad309d44cd", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/33832848-42ab-63f3-1a55-c0ad309d44cd", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_2.1.14" ] }, { "policyDefinitionReferenceId": "2c6bee3a-2180-2430-440d-db3c7a849870", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2c6bee3a-2180-2430-440d-db3c7a849870", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_2.1.15", "CIS_Azure_2.0.0_7.6" ] }, { "policyDefinitionReferenceId": "5fc24b95-53f7-0ed1-2330-701b539b97fe", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5fc24b95-53f7-0ed1-2330-701b539b97fe", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_2.1.15", "CIS_Azure_2.0.0_7.6" ] }, { "policyDefinitionReferenceId": "4f4f78b8-e367-4b10-a341-d9a4ad5cf1c7", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4f4f78b8-e367-4b10-a341-d9a4ad5cf1c7", "definitionVersion": "1.*.*", "parameters": { "effect": { "value": "[parameters('effect-4f4f78b8-e367-4b10-a341-d9a4ad5cf1c7')]" } }, "groupNames": [ "CIS_Azure_2.0.0_2.1.19" ] }, { "policyDefinitionReferenceId": "6e2593d9-add6-4083-9c9b-4b7d2188c899", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6e2593d9-add6-4083-9c9b-4b7d2188c899", "definitionVersion": "1.*.*", "parameters": { "effect": { "value": "[parameters('effect-6e2593d9-add6-4083-9c9b-4b7d2188c899')]" } }, "groupNames": [ "CIS_Azure_2.0.0_2.1.20" ] }, { "policyDefinitionReferenceId": "b11697e8-9515-16f1-7a35-477d5c8a1344", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b11697e8-9515-16f1-7a35-477d5c8a1344", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_3.1", "CIS_Azure_2.0.0_3.12", "CIS_Azure_2.0.0_3.15", "CIS_Azure_2.0.0_4.1.3", "CIS_Azure_2.0.0_4.1.5", "CIS_Azure_2.0.0_4.3.1", "CIS_Azure_2.0.0_4.3.8", "CIS_Azure_2.0.0_4.4.1", "CIS_Azure_2.0.0_4.4.2", "CIS_Azure_2.0.0_7.3", "CIS_Azure_2.0.0_7.4", "CIS_Azure_2.0.0_7.7", "CIS_Azure_2.0.0_9.2", "CIS_Azure_2.0.0_9.3", "CIS_Azure_2.0.0_9.10" ] }, { "policyDefinitionReferenceId": "b2d3e5a2-97ab-5497-565a-71172a729d93", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b2d3e5a2-97ab-5497-565a-71172a729d93", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_3.1", "CIS_Azure_2.0.0_3.15", "CIS_Azure_2.0.0_4.3.1", "CIS_Azure_2.0.0_4.4.1", "CIS_Azure_2.0.0_4.4.2", "CIS_Azure_2.0.0_9.2", "CIS_Azure_2.0.0_9.3", "CIS_Azure_2.0.0_9.10" ] }, { "policyDefinitionReferenceId": "26daf649-22d1-97e9-2a8a-01b182194d59", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/26daf649-22d1-97e9-2a8a-01b182194d59", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_3.1", "CIS_Azure_2.0.0_3.15", "CIS_Azure_2.0.0_4.3.1", "CIS_Azure_2.0.0_4.4.1", "CIS_Azure_2.0.0_4.4.2", "CIS_Azure_2.0.0_9.2", "CIS_Azure_2.0.0_9.3", "CIS_Azure_2.0.0_9.10" ] }, { "policyDefinitionReferenceId": "404c3081-a854-4457-ae30-26a93ef643f9", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/404c3081-a854-4457-ae30-26a93ef643f9", "definitionVersion": "2.*.*", "parameters": { "effect": { "value": "[parameters('effect-404c3081-a854-4457-ae30-26a93ef643f9')]" } }, "groupNames": [ "CIS_Azure_2.0.0_3.1" ] }, { "policyDefinitionReferenceId": "4733ea7b-a883-42fe-8cac-97454c2a9e4a", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4733ea7b-a883-42fe-8cac-97454c2a9e4a", "definitionVersion": "1.*.*", "parameters": { "effect": { "value": "[parameters('effect-4733ea7b-a883-42fe-8cac-97454c2a9e4a')]" } }, "groupNames": [ "CIS_Azure_2.0.0_3.2" ] }, { "policyDefinitionReferenceId": "51e4b233-8ee3-8bdc-8f5f-f33bd0d229b7", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/51e4b233-8ee3-8bdc-8f5f-f33bd0d229b7", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_3.4", "CIS_Azure_2.0.0_8.1", "CIS_Azure_2.0.0_8.2", "CIS_Azure_2.0.0_8.3", "CIS_Azure_2.0.0_8.4", "CIS_Azure_2.0.0_9.11" ] }, { "policyDefinitionReferenceId": "c4ccd607-702b-8ae6-8eeb-fc3339cd4b42", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c4ccd607-702b-8ae6-8eeb-fc3339cd4b42", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_3.4", "CIS_Azure_2.0.0_8.1", "CIS_Azure_2.0.0_8.2", "CIS_Azure_2.0.0_8.3", "CIS_Azure_2.0.0_8.4", "CIS_Azure_2.0.0_9.11" ] }, { "policyDefinitionReferenceId": "d661e9eb-4e15-5ba1-6f02-cdc467db0d6c", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d661e9eb-4e15-5ba1-6f02-cdc467db0d6c", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_3.4", "CIS_Azure_2.0.0_8.1", "CIS_Azure_2.0.0_8.2", "CIS_Azure_2.0.0_8.3", "CIS_Azure_2.0.0_8.4", "CIS_Azure_2.0.0_9.11" ] }, { "policyDefinitionReferenceId": "7a0ecd94-3699-5273-76a5-edb8499f655a", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7a0ecd94-3699-5273-76a5-edb8499f655a", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_3.4", "CIS_Azure_2.0.0_8.1", "CIS_Azure_2.0.0_8.2", "CIS_Azure_2.0.0_8.3", "CIS_Azure_2.0.0_8.4", "CIS_Azure_2.0.0_9.11" ] }, { "policyDefinitionReferenceId": "97d91b33-7050-237b-3e23-a77d57d84e13", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/97d91b33-7050-237b-3e23-a77d57d84e13", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_3.4", "CIS_Azure_2.0.0_8.1", "CIS_Azure_2.0.0_8.2", "CIS_Azure_2.0.0_8.3", "CIS_Azure_2.0.0_8.4", "CIS_Azure_2.0.0_9.11" ] }, { "policyDefinitionReferenceId": "9c276cf3-596f-581a-7fbd-f5e46edaa0f4", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9c276cf3-596f-581a-7fbd-f5e46edaa0f4", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_3.4", "CIS_Azure_2.0.0_8.1", "CIS_Azure_2.0.0_8.2", "CIS_Azure_2.0.0_8.3", "CIS_Azure_2.0.0_8.4", "CIS_Azure_2.0.0_9.11" ] }, { "policyDefinitionReferenceId": "8d140e8b-76c7-77de-1d46-ed1b2e112444", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8d140e8b-76c7-77de-1d46-ed1b2e112444", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_3.4", "CIS_Azure_2.0.0_8.1", "CIS_Azure_2.0.0_8.2", "CIS_Azure_2.0.0_8.3", "CIS_Azure_2.0.0_8.4", "CIS_Azure_2.0.0_9.11" ] }, { "policyDefinitionReferenceId": "a3e98638-51d4-4e28-910a-60e98c1a756f", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a3e98638-51d4-4e28-910a-60e98c1a756f", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_3.5", "CIS_Azure_2.0.0_3.13", "CIS_Azure_2.0.0_3.14", "CIS_Azure_2.0.0_5.4", "CIS_Azure_2.0.0_5.1.2" ] }, { "policyDefinitionReferenceId": "6625638f-3ba1-7404-5983-0ea33d719d34", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6625638f-3ba1-7404-5983-0ea33d719d34", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_3.5", "CIS_Azure_2.0.0_3.13", "CIS_Azure_2.0.0_3.14", "CIS_Azure_2.0.0_4.1.1", "CIS_Azure_2.0.0_4.3.2", "CIS_Azure_2.0.0_4.3.3", "CIS_Azure_2.0.0_4.3.4", "CIS_Azure_2.0.0_4.3.5", "CIS_Azure_2.0.0_5.4", "CIS_Azure_2.0.0_5.1.2", "CIS_Azure_2.0.0_5.1.5" ] }, { "policyDefinitionReferenceId": "32f22cfa-770b-057c-965b-450898425519", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/32f22cfa-770b-057c-965b-450898425519", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_1.10", "CIS_Azure_2.0.0_3.6" ] }, { "policyDefinitionReferenceId": "d9d48ffb-0d8c-0bd5-5f31-5a5826d19f10", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d9d48ffb-0d8c-0bd5-5f31-5a5826d19f10", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_3.6" ] }, { "policyDefinitionReferenceId": "4502e506-5f35-0df4-684f-b326e3cc7093", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4502e506-5f35-0df4-684f-b326e3cc7093", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_3.6" ] }, { "policyDefinitionReferenceId": "34c877ad-507e-4c82-993e-3452a6e0ad3c", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/34c877ad-507e-4c82-993e-3452a6e0ad3c", "definitionVersion": "1.*.*", "parameters": { "effect": { "value": "[parameters('effect-34c877ad-507e-4c82-993e-3452a6e0ad3c')]" } }, "groupNames": [ "CIS_Azure_2.0.0_3.8" ] }, { "policyDefinitionReferenceId": "2a1a9cdf-e04d-429a-8416-3bfb72a1b26f", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2a1a9cdf-e04d-429a-8416-3bfb72a1b26f", "definitionVersion": "1.*.*", "parameters": { "effect": { "value": "[parameters('effect-2a1a9cdf-e04d-429a-8416-3bfb72a1b26f')]" } }, "groupNames": [ "CIS_Azure_2.0.0_3.8" ] }, { "policyDefinitionReferenceId": "59bedbdc-0ba9-39b9-66bb-1d1c192384e6", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/59bedbdc-0ba9-39b9-66bb-1d1c192384e6", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_3.9", "CIS_Azure_2.0.0_4.1.2", "CIS_Azure_2.0.0_4.3.7" ] }, { "policyDefinitionReferenceId": "79365f13-8ba4-1f6c-2ac4-aa39929f56d0", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/79365f13-8ba4-1f6c-2ac4-aa39929f56d0", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_3.9", "CIS_Azure_2.0.0_4.1.2", "CIS_Azure_2.0.0_4.3.7" ] }, { "policyDefinitionReferenceId": "398fdbd8-56fd-274d-35c6-fa2d3b2755a1", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/398fdbd8-56fd-274d-35c6-fa2d3b2755a1", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_3.9", "CIS_Azure_2.0.0_4.3.7" ] }, { "policyDefinitionReferenceId": "f476f3b0-4152-526e-a209-44e5f8c968d7", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f476f3b0-4152-526e-a209-44e5f8c968d7", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_3.9", "CIS_Azure_2.0.0_4.3.7" ] }, { "policyDefinitionReferenceId": "c7fddb0e-3f44-8635-2b35-dc6b8e740b7c", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c7fddb0e-3f44-8635-2b35-dc6b8e740b7c", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_3.9", "CIS_Azure_2.0.0_4.3.7" ] }, { "policyDefinitionReferenceId": "c9d007d0-c057-4772-b18c-01e546713bcd", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c9d007d0-c057-4772-b18c-01e546713bcd", "definitionVersion": "1.*.*", "parameters": { "effect": { "value": "[parameters('effect-c9d007d0-c057-4772-b18c-01e546713bcd')]" } }, "groupNames": [ "CIS_Azure_2.0.0_3.9" ] }, { "policyDefinitionReferenceId": "6edd7eda-6dd8-40f7-810d-67160c639cd9", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6edd7eda-6dd8-40f7-810d-67160c639cd9", "definitionVersion": "2.*.*", "parameters": { "effect": { "value": "[parameters('effect-6edd7eda-6dd8-40f7-810d-67160c639cd9')]" } }, "groupNames": [ "CIS_Azure_2.0.0_3.10" ] }, { "policyDefinitionReferenceId": "3c9aa856-6b86-35dc-83f4-bc72cec74dea", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3c9aa856-6b86-35dc-83f4-bc72cec74dea", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_3.12", "CIS_Azure_2.0.0_4.1.3", "CIS_Azure_2.0.0_4.1.5", "CIS_Azure_2.0.0_4.3.8", "CIS_Azure_2.0.0_7.3", "CIS_Azure_2.0.0_7.4", "CIS_Azure_2.0.0_7.7" ] }, { "policyDefinitionReferenceId": "a315c657-4a00-8eba-15ac-44692ad24423", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a315c657-4a00-8eba-15ac-44692ad24423", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_3.12", "CIS_Azure_2.0.0_4.1.3", "CIS_Azure_2.0.0_4.1.5", "CIS_Azure_2.0.0_4.3.8", "CIS_Azure_2.0.0_7.3", "CIS_Azure_2.0.0_7.4", "CIS_Azure_2.0.0_7.7" ] }, { "policyDefinitionReferenceId": "e435f7e3-0dd9-58c9-451f-9b44b96c0232", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e435f7e3-0dd9-58c9-451f-9b44b96c0232", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_3.12", "CIS_Azure_2.0.0_4.1.3", "CIS_Azure_2.0.0_4.1.5", "CIS_Azure_2.0.0_4.3.8", "CIS_Azure_2.0.0_7.3", "CIS_Azure_2.0.0_7.4", "CIS_Azure_2.0.0_7.7" ] }, { "policyDefinitionReferenceId": "6fac406b-40ca-413b-bf8e-0bf964659c25", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6fac406b-40ca-413b-bf8e-0bf964659c25", "definitionVersion": "1.*.*", "parameters": { "effect": { "value": "[parameters('effect-6fac406b-40ca-413b-bf8e-0bf964659c25')]" } }, "groupNames": [ "CIS_Azure_2.0.0_3.12" ] }, { "policyDefinitionReferenceId": "a6fb4358-5bf4-4ad7-ba82-2cd2f41ce5e9", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a6fb4358-5bf4-4ad7-ba82-2cd2f41ce5e9", "definitionVersion": "2.*.*", "parameters": { "effect": { "value": "[parameters('effect-a6fb4358-5bf4-4ad7-ba82-2cd2f41ce5e9')]" }, "setting": { "value": "[parameters('setting-a6fb4358-5bf4-4ad7-ba82-2cd2f41ce5e9')]" } }, "groupNames": [ "CIS_Azure_2.0.0_4.1.1" ] }, { "policyDefinitionReferenceId": "0a370ff3-6cab-4e85-8995-295fd854c5b8", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0a370ff3-6cab-4e85-8995-295fd854c5b8", "definitionVersion": "2.*.*", "parameters": { "effect": { "value": "[parameters('effect-0a370ff3-6cab-4e85-8995-295fd854c5b8')]" } }, "groupNames": [ "CIS_Azure_2.0.0_4.1.3" ] }, { "policyDefinitionReferenceId": "ac01ad65-10e5-46df-bdd9-6b0cad13e1d2", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ac01ad65-10e5-46df-bdd9-6b0cad13e1d2", "definitionVersion": "2.*.*", "parameters": { "effect": { "value": "[parameters('effect-ac01ad65-10e5-46df-bdd9-6b0cad13e1d2')]" } }, "groupNames": [ "CIS_Azure_2.0.0_4.1.3" ] }, { "policyDefinitionReferenceId": "1f314764-cb73-4fc9-b863-8eca98ac36e9", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1f314764-cb73-4fc9-b863-8eca98ac36e9", "definitionVersion": "1.*.*", "parameters": { "effect": { "value": "[parameters('effect-1f314764-cb73-4fc9-b863-8eca98ac36e9')]" } }, "groupNames": [ "CIS_Azure_2.0.0_4.1.4" ] }, { "policyDefinitionReferenceId": "17k78e20-9358-41c9-923c-fb736d382a12", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/17k78e20-9358-41c9-923c-fb736d382a12", "definitionVersion": "2.*.*", "parameters": { "effect": { "value": "[parameters('effect-17k78e20-9358-41c9-923c-fb736d382a12')]" } }, "groupNames": [ "CIS_Azure_2.0.0_4.1.5" ] }, { "policyDefinitionReferenceId": "333b4ada-4a02-0648-3d4d-d812974f1bb2", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/333b4ada-4a02-0648-3d4d-d812974f1bb2", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_4.1.6", "CIS_Azure_2.0.0_4.3.6", "CIS_Azure_2.0.0_5.4" ] }, { "policyDefinitionReferenceId": "efef28d0-3226-966a-a1e8-70e89c1b30bc", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/efef28d0-3226-966a-a1e8-70e89c1b30bc", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_4.1.6", "CIS_Azure_2.0.0_4.3.6", "CIS_Azure_2.0.0_5.4", "CIS_Azure_2.0.0_6.5" ] }, { "policyDefinitionReferenceId": "7c7032fe-9ce6-9092-5890-87a1a3755db1", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7c7032fe-9ce6-9092-5890-87a1a3755db1", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_4.1.6", "CIS_Azure_2.0.0_4.3.6", "CIS_Azure_2.0.0_5.4", "CIS_Azure_2.0.0_6.5" ] }, { "policyDefinitionReferenceId": "89099bee-89e0-4b26-a5f4-165451757743", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/89099bee-89e0-4b26-a5f4-165451757743", "definitionVersion": "3.*.*", "parameters": { "effect": { "value": "[parameters('effect-89099bee-89e0-4b26-a5f4-165451757743')]" } }, "groupNames": [ "CIS_Azure_2.0.0_4.1.6" ] }, { "policyDefinitionReferenceId": "50e81644-923d-33fc-6ebb-9733bc8d1a06", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/50e81644-923d-33fc-6ebb-9733bc8d1a06", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_2.1.1", "CIS_Azure_2.0.0_2.1.2", "CIS_Azure_2.0.0_2.1.4", "CIS_Azure_2.0.0_2.1.5", "CIS_Azure_2.0.0_2.1.7", "CIS_Azure_2.0.0_2.1.8", "CIS_Azure_2.0.0_2.1.10", "CIS_Azure_2.0.0_2.1.17", "CIS_Azure_2.0.0_2.1.21", "CIS_Azure_2.0.0_2.1.22", "CIS_Azure_2.0.0_4.2.1", "CIS_Azure_2.0.0_7.6" ] }, { "policyDefinitionReferenceId": "abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9", "definitionVersion": "2.*.*", "parameters": { "effect": { "value": "[parameters('effect-abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9')]" } }, "groupNames": [ "CIS_Azure_2.0.0_4.2.1" ] }, { "policyDefinitionReferenceId": "abfb7388-5bf4-4ad7-ba99-2cd2f41cebb9", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/abfb7388-5bf4-4ad7-ba99-2cd2f41cebb9", "definitionVersion": "1.*.*", "parameters": { "effect": { "value": "[parameters('effect-abfb7388-5bf4-4ad7-ba99-2cd2f41cebb9')]" } }, "groupNames": [ "CIS_Azure_2.0.0_4.2.1" ] }, { "policyDefinitionReferenceId": "3c5e0e1a-216f-8f49-0a15-76ed0d8b8e1f", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3c5e0e1a-216f-8f49-0a15-76ed0d8b8e1f", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_2.1.1", "CIS_Azure_2.0.0_2.1.2", "CIS_Azure_2.0.0_2.1.4", "CIS_Azure_2.0.0_2.1.5", "CIS_Azure_2.0.0_2.1.7", "CIS_Azure_2.0.0_2.1.8", "CIS_Azure_2.0.0_2.1.10", "CIS_Azure_2.0.0_2.1.17", "CIS_Azure_2.0.0_2.1.21", "CIS_Azure_2.0.0_2.1.22", "CIS_Azure_2.0.0_4.2.2", "CIS_Azure_2.0.0_4.2.3", "CIS_Azure_2.0.0_4.2.4", "CIS_Azure_2.0.0_4.2.5", "CIS_Azure_2.0.0_7.6" ] }, { "policyDefinitionReferenceId": "ef2a8f2a-b3d9-49cd-a8a8-9a3aaaf647d9", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ef2a8f2a-b3d9-49cd-a8a8-9a3aaaf647d9", "definitionVersion": "3.*.*", "parameters": { "effect": { "value": "[parameters('effect-ef2a8f2a-b3d9-49cd-a8a8-9a3aaaf647d9')]" } }, "groupNames": [ "CIS_Azure_2.0.0_4.2.2", "CIS_Azure_2.0.0_4.2.4", "CIS_Azure_2.0.0_4.2.5" ] }, { "policyDefinitionReferenceId": "1b7aa243-30e4-4c9e-bca8-d0d3022b634a", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1b7aa243-30e4-4c9e-bca8-d0d3022b634a", "definitionVersion": "1.*.*", "parameters": { "effect": { "value": "[parameters('effect-1b7aa243-30e4-4c9e-bca8-d0d3022b634a')]" } }, "groupNames": [ "CIS_Azure_2.0.0_4.2.2", "CIS_Azure_2.0.0_4.2.3" ] }, { "policyDefinitionReferenceId": "e3905a3c-97e7-0b4f-15fb-465c0927536f", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e3905a3c-97e7-0b4f-15fb-465c0927536f", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_4.2.4", "CIS_Azure_2.0.0_4.2.5" ] }, { "policyDefinitionReferenceId": "d158790f-bfb0-486c-8631-2dc6b4e8e6af", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d158790f-bfb0-486c-8631-2dc6b4e8e6af", "definitionVersion": "1.*.*", "parameters": { "effect": { "value": "[parameters('effect-d158790f-bfb0-486c-8631-2dc6b4e8e6af')]" } }, "groupNames": [ "CIS_Azure_2.0.0_4.3.1" ] }, { "policyDefinitionReferenceId": "eb6f77b9-bd53-4e35-a23d-7f65d5f0e43d", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/eb6f77b9-bd53-4e35-a23d-7f65d5f0e43d", "definitionVersion": "1.*.*", "parameters": { "effect": { "value": "[parameters('effect-eb6f77b9-bd53-4e35-a23d-7f65d5f0e43d')]" } }, "groupNames": [ "CIS_Azure_2.0.0_4.3.2" ] }, { "policyDefinitionReferenceId": "eb6f77b9-bd53-4e35-a23d-7f65d5f0e442", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/eb6f77b9-bd53-4e35-a23d-7f65d5f0e442", "definitionVersion": "1.*.*", "parameters": { "effect": { "value": "[parameters('effect-eb6f77b9-bd53-4e35-a23d-7f65d5f0e442')]" } }, "groupNames": [ "CIS_Azure_2.0.0_4.3.3" ] }, { "policyDefinitionReferenceId": "eb6f77b9-bd53-4e35-a23d-7f65d5f0e446", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/eb6f77b9-bd53-4e35-a23d-7f65d5f0e446", "definitionVersion": "1.*.*", "parameters": { "effect": { "value": "[parameters('effect-eb6f77b9-bd53-4e35-a23d-7f65d5f0e446')]" } }, "groupNames": [ "CIS_Azure_2.0.0_4.3.4" ] }, { "policyDefinitionReferenceId": "5345bb39-67dc-4960-a1bf-427e16b9a0bd", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5345bb39-67dc-4960-a1bf-427e16b9a0bd", "definitionVersion": "1.*.*", "parameters": { "effect": { "value": "[parameters('effect-5345bb39-67dc-4960-a1bf-427e16b9a0bd')]" } }, "groupNames": [ "CIS_Azure_2.0.0_4.3.5" ] }, { "policyDefinitionReferenceId": "862e97cf-49fc-4a5c-9de4-40d4e2e7c8eb", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/862e97cf-49fc-4a5c-9de4-40d4e2e7c8eb", "definitionVersion": "2.*.*", "parameters": { "effect": { "value": "[parameters('effect-862e97cf-49fc-4a5c-9de4-40d4e2e7c8eb')]" } }, "groupNames": [ "CIS_Azure_2.0.0_4.5.1" ] }, { "policyDefinitionReferenceId": "58440f8a-10c5-4151-bdce-dfbaad4a20b7", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/58440f8a-10c5-4151-bdce-dfbaad4a20b7", "definitionVersion": "1.*.*", "parameters": { "effect": { "value": "[parameters('effect-58440f8a-10c5-4151-bdce-dfbaad4a20b7')]" } }, "groupNames": [ "CIS_Azure_2.0.0_4.5.2" ] }, { "policyDefinitionReferenceId": "5450f5bd-9c72-4390-a9c4-a7aba4edfdd2", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5450f5bd-9c72-4390-a9c4-a7aba4edfdd2", "definitionVersion": "1.*.*", "parameters": { "effect": { "value": "[parameters('effect-5450f5bd-9c72-4390-a9c4-a7aba4edfdd2')]" } }, "groupNames": [ "CIS_Azure_2.0.0_4.5.3" ] }, { "policyDefinitionReferenceId": "cf820ca0-f99e-4f3e-84fb-66e913812d21", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/cf820ca0-f99e-4f3e-84fb-66e913812d21", "definitionVersion": "5.*.*", "parameters": { "effect": { "value": "[parameters('effect-cf820ca0-f99e-4f3e-84fb-66e913812d21')]" }, "requiredRetentionDays": { "value": "[parameters('requiredRetentionDays')]" } }, "groupNames": [ "CIS_Azure_2.0.0_5.4", "CIS_Azure_2.0.0_5.1.5" ] }, { "policyDefinitionReferenceId": "91a78b24-f231-4a8a-8da9-02c35b2b6510", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/91a78b24-f231-4a8a-8da9-02c35b2b6510", "definitionVersion": "2.*.*", "parameters": { "effect": { "value": "[parameters('effect-91a78b24-f231-4a8a-8da9-02c35b2b6510')]" } }, "groupNames": [ "CIS_Azure_2.0.0_5.4" ] }, { "policyDefinitionReferenceId": "428256e6-1fac-4f48-a757-df34c2b3336d", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/428256e6-1fac-4f48-a757-df34c2b3336d", "definitionVersion": "5.*.*", "parameters": { "effect": { "value": "[parameters('effect-428256e6-1fac-4f48-a757-df34c2b3336d')]" }, "requiredRetentionDays": { "value": "[parameters('requiredRetentionDays')]" } }, "groupNames": [ "CIS_Azure_2.0.0_5.4" ] }, { "policyDefinitionReferenceId": "057ef27e-665e-4328-8ea3-04b3122bd9fb", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/057ef27e-665e-4328-8ea3-04b3122bd9fb", "definitionVersion": "5.*.*", "parameters": { "effect": { "value": "[parameters('effect-057ef27e-665e-4328-8ea3-04b3122bd9fb')]" }, "requiredRetentionDays": { "value": "[parameters('requiredRetentionDays')]" } }, "groupNames": [ "CIS_Azure_2.0.0_5.4" ] }, { "policyDefinitionReferenceId": "c95c74d9-38fe-4f0d-af86-0c7d626a315c", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c95c74d9-38fe-4f0d-af86-0c7d626a315c", "definitionVersion": "5.*.*", "parameters": { "effect": { "value": "[parameters('effect-c95c74d9-38fe-4f0d-af86-0c7d626a315c')]" }, "requiredRetentionDays": { "value": "[parameters('requiredRetentionDays')]" } }, "groupNames": [ "CIS_Azure_2.0.0_5.4" ] }, { "policyDefinitionReferenceId": "83a214f7-d01a-484b-91a9-ed54470c9a6a", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/83a214f7-d01a-484b-91a9-ed54470c9a6a", "definitionVersion": "5.*.*", "parameters": { "effect": { "value": "[parameters('effect-83a214f7-d01a-484b-91a9-ed54470c9a6a')]" }, "requiredRetentionDays": { "value": "[parameters('requiredRetentionDays')]" } }, "groupNames": [ "CIS_Azure_2.0.0_5.4" ] }, { "policyDefinitionReferenceId": "383856f8-de7f-44a2-81fc-e5135b5c2aa4", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/383856f8-de7f-44a2-81fc-e5135b5c2aa4", "definitionVersion": "3.*.*", "parameters": { "effect": { "value": "[parameters('effect-383856f8-de7f-44a2-81fc-e5135b5c2aa4')]" }, "requiredRetentionDays": { "value": "[parameters('requiredRetentionDays')]" } }, "groupNames": [ "CIS_Azure_2.0.0_5.4" ] }, { "policyDefinitionReferenceId": "34f95f76-5386-4de7-b824-0d8478470c9d", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/34f95f76-5386-4de7-b824-0d8478470c9d", "definitionVersion": "5.*.*", "parameters": { "effect": { "value": "[parameters('effect-34f95f76-5386-4de7-b824-0d8478470c9d')]" }, "requiredRetentionDays": { "value": "[parameters('requiredRetentionDays')]" } }, "groupNames": [ "CIS_Azure_2.0.0_5.4" ] }, { "policyDefinitionReferenceId": "b4330a05-a843-4bc8-bf9a-cacce50c67f4", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b4330a05-a843-4bc8-bf9a-cacce50c67f4", "definitionVersion": "5.*.*", "parameters": { "effect": { "value": "[parameters('effect-b4330a05-a843-4bc8-bf9a-cacce50c67f4')]" }, "requiredRetentionDays": { "value": "[parameters('requiredRetentionDays')]" } }, "groupNames": [ "CIS_Azure_2.0.0_5.4" ] }, { "policyDefinitionReferenceId": "f8d36e2f-389b-4ee4-898d-21aeb69a0f45", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f8d36e2f-389b-4ee4-898d-21aeb69a0f45", "definitionVersion": "5.*.*", "parameters": { "effect": { "value": "[parameters('effect-f8d36e2f-389b-4ee4-898d-21aeb69a0f45')]" }, "requiredRetentionDays": { "value": "[parameters('requiredRetentionDays')]" } }, "groupNames": [ "CIS_Azure_2.0.0_5.4" ] }, { "policyDefinitionReferenceId": "f9be5368-9bf5-4b84-9e0a-7850da98bb46", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f9be5368-9bf5-4b84-9e0a-7850da98bb46", "definitionVersion": "5.*.*", "parameters": { "effect": { "value": "[parameters('effect-f9be5368-9bf5-4b84-9e0a-7850da98bb46')]" }, "requiredRetentionDays": { "value": "[parameters('requiredRetentionDays')]" } }, "groupNames": [ "CIS_Azure_2.0.0_5.4" ] }, { "policyDefinitionReferenceId": "2f67e567-03db-9d1f-67dc-b6ffb91312f4", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2f67e567-03db-9d1f-67dc-b6ffb91312f4", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_3.5", "CIS_Azure_2.0.0_3.13", "CIS_Azure_2.0.0_3.14", "CIS_Azure_2.0.0_4.1.1", "CIS_Azure_2.0.0_4.3.2", "CIS_Azure_2.0.0_4.3.3", "CIS_Azure_2.0.0_4.3.4", "CIS_Azure_2.0.0_4.3.5", "CIS_Azure_2.0.0_5.4", "CIS_Azure_2.0.0_5.1.1", "CIS_Azure_2.0.0_5.1.2", "CIS_Azure_2.0.0_5.1.5" ] }, { "policyDefinitionReferenceId": "4fa4b6c0-31ca-4c0d-b10d-24b96f62a751", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4fa4b6c0-31ca-4c0d-b10d-24b96f62a751", "definitionVersion": "3.*.*-preview", "parameters": { "effect": { "value": "[parameters('effect-4fa4b6c0-31ca-4c0d-b10d-24b96f62a751')]" } }, "groupNames": [ "CIS_Azure_2.0.0_3.7", "CIS_Azure_2.0.0_5.1.3" ] }, { "policyDefinitionReferenceId": "0e696f5a-451f-5c15-5532-044136538491", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0e696f5a-451f-5c15-5532-044136538491", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_5.1.3", "CIS_Azure_2.0.0_5.1.4" ] }, { "policyDefinitionReferenceId": "2c843d78-8f64-92b5-6a9b-e8186c0e7eb6", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2c843d78-8f64-92b5-6a9b-e8186c0e7eb6", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_5.1.3", "CIS_Azure_2.0.0_5.1.4" ] }, { "policyDefinitionReferenceId": "c0559109-6a27-a217-6821-5a6d44f92897", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c0559109-6a27-a217-6821-5a6d44f92897", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_5.1.4" ] }, { "policyDefinitionReferenceId": "fbb99e8e-e444-4da0-9ff1-75c92f5a85b2", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/fbb99e8e-e444-4da0-9ff1-75c92f5a85b2", "definitionVersion": "1.*.*", "parameters": { "effect": { "value": "[parameters('effect-fbb99e8e-e444-4da0-9ff1-75c92f5a85b2')]" } }, "groupNames": [ "CIS_Azure_2.0.0_5.1.4" ] }, { "policyDefinitionReferenceId": "27960feb-a23c-4577-8d36-ef8b5f35e0be", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/27960feb-a23c-4577-8d36-ef8b5f35e0be", "definitionVersion": "1.*.*", "parameters": { "effect": { "value": "[parameters('effect-27960feb-a23c-4577-8d36-ef8b5f35e0be')]" } }, "groupNames": [ "CIS_Azure_2.0.0_5.1.6" ] }, { "policyDefinitionReferenceId": "c251913d-7d24-4958-af87-478ed3b9ba41", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c251913d-7d24-4958-af87-478ed3b9ba41", "definitionVersion": "1.*.*", "parameters": { "effect": { "value": "[parameters('effect-c251913d-7d24-4958-af87-478ed3b9ba41')]" } }, "groupNames": [ "CIS_Azure_2.0.0_5.1.6" ] }, { "policyDefinitionReferenceId": "4c3c6c5f-0d47-4402-99b8-aa543dd8bcee", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4c3c6c5f-0d47-4402-99b8-aa543dd8bcee", "definitionVersion": "1.*.*", "parameters": { "effect": { "value": "[parameters('effect-4c3c6c5f-0d47-4402-99b8-aa543dd8bcee')]" } }, "groupNames": [ "CIS_Azure_2.0.0_5.1.6" ] }, { "policyDefinitionReferenceId": "9622aaa9-5c49-40e2-5bf8-660b7cd23deb", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9622aaa9-5c49-40e2-5bf8-660b7cd23deb", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_5.2.1", "CIS_Azure_2.0.0_5.2.2", "CIS_Azure_2.0.0_5.2.3", "CIS_Azure_2.0.0_5.2.4", "CIS_Azure_2.0.0_5.2.5", "CIS_Azure_2.0.0_5.2.6", "CIS_Azure_2.0.0_5.2.7", "CIS_Azure_2.0.0_5.2.8" ] }, { "policyDefinitionReferenceId": "2b4e134f-1e4c-2bff-573e-082d85479b6e", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2b4e134f-1e4c-2bff-573e-082d85479b6e", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_5.2.1", "CIS_Azure_2.0.0_5.2.2", "CIS_Azure_2.0.0_5.2.3", "CIS_Azure_2.0.0_5.2.4", "CIS_Azure_2.0.0_5.2.5", "CIS_Azure_2.0.0_5.2.6", "CIS_Azure_2.0.0_5.2.7", "CIS_Azure_2.0.0_5.2.8" ] }, { "policyDefinitionReferenceId": "af38215f-70c4-0cd6-40c2-c52d86690a45", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/af38215f-70c4-0cd6-40c2-c52d86690a45", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_5.2.1", "CIS_Azure_2.0.0_5.2.2", "CIS_Azure_2.0.0_5.2.3", "CIS_Azure_2.0.0_5.2.4", "CIS_Azure_2.0.0_5.2.5", "CIS_Azure_2.0.0_5.2.6", "CIS_Azure_2.0.0_5.2.7", "CIS_Azure_2.0.0_5.2.8" ] }, { "policyDefinitionReferenceId": "c5447c04-a4d7-4ba8-a263-c9ee321a6858-0", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c5447c04-a4d7-4ba8-a263-c9ee321a6858", "definitionVersion": "3.*.*", "parameters": { "effect": { "value": "[parameters('effect-c5447c04-a4d7-4ba8-a263-c9ee321a6858-MicrosoftAuthorization-policyAssignments-write')]" }, "operationName": { "value": "Microsoft.Authorization/policyAssignments/write" } }, "groupNames": [ "CIS_Azure_2.0.0_5.1.2", "CIS_Azure_2.0.0_5.2.1", "CIS_Azure_2.0.0_5.2.2" ] }, { "policyDefinitionReferenceId": "c5447c04-a4d7-4ba8-a263-c9ee321a6858-1", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c5447c04-a4d7-4ba8-a263-c9ee321a6858", "definitionVersion": "3.*.*", "parameters": { "effect": { "value": "[parameters('effect-c5447c04-a4d7-4ba8-a263-c9ee321a6858-MicrosoftAuthorization-policyAssignments-delete')]" }, "operationName": { "value": "Microsoft.Authorization/policyAssignments/delete" } }, "groupNames": [ "CIS_Azure_2.0.0_5.1.2", "CIS_Azure_2.0.0_5.2.1", "CIS_Azure_2.0.0_5.2.2" ] }, { "policyDefinitionReferenceId": "b954148f-4c11-4c38-8221-be76711e194a-0", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b954148f-4c11-4c38-8221-be76711e194a", "definitionVersion": "1.*.*", "parameters": { "effect": { "value": "[parameters('effect-b954148f-4c11-4c38-8221-be76711e194a-MicrosoftNetwork-networkSecurityGroups-write')]" }, "operationName": { "value": "Microsoft.Network/networkSecurityGroups/write" } }, "groupNames": [ "CIS_Azure_2.0.0_5.1.2", "CIS_Azure_2.0.0_5.2.3", "CIS_Azure_2.0.0_5.2.4", "CIS_Azure_2.0.0_5.2.5", "CIS_Azure_2.0.0_5.2.6", "CIS_Azure_2.0.0_5.2.7", "CIS_Azure_2.0.0_5.2.8" ] }, { "policyDefinitionReferenceId": "b954148f-4c11-4c38-8221-be76711e194a-1", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b954148f-4c11-4c38-8221-be76711e194a", "definitionVersion": "1.*.*", "parameters": { "effect": { "value": "[parameters('effect-b954148f-4c11-4c38-8221-be76711e194a-MicrosoftNetwork-networkSecurityGroups-delete')]" }, "operationName": { "value": "Microsoft.Network/networkSecurityGroups/delete" } }, "groupNames": [ "CIS_Azure_2.0.0_5.1.2", "CIS_Azure_2.0.0_5.2.3", "CIS_Azure_2.0.0_5.2.4", "CIS_Azure_2.0.0_5.2.5", "CIS_Azure_2.0.0_5.2.6", "CIS_Azure_2.0.0_5.2.7", "CIS_Azure_2.0.0_5.2.8" ] }, { "policyDefinitionReferenceId": "b954148f-4c11-4c38-8221-be76711e194a-2", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b954148f-4c11-4c38-8221-be76711e194a", "definitionVersion": "1.*.*", "parameters": { "effect": { "value": "[parameters('effect-b954148f-4c11-4c38-8221-be76711e194a-MicrosoftNetwork-networkSecurityGroups-securityRules-write')]" }, "operationName": { "value": "Microsoft.Network/networkSecurityGroups/securityRules/write" } }, "groupNames": [ "CIS_Azure_2.0.0_5.1.2", "CIS_Azure_2.0.0_5.2.3", "CIS_Azure_2.0.0_5.2.4", "CIS_Azure_2.0.0_5.2.5", "CIS_Azure_2.0.0_5.2.6", "CIS_Azure_2.0.0_5.2.7", "CIS_Azure_2.0.0_5.2.8" ] }, { "policyDefinitionReferenceId": "b954148f-4c11-4c38-8221-be76711e194a-3", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b954148f-4c11-4c38-8221-be76711e194a", "definitionVersion": "1.*.*", "parameters": { "effect": { "value": "[parameters('effect-b954148f-4c11-4c38-8221-be76711e194a-MicrosoftNetwork-networkSecurityGroups-securityRules-delete')]" }, "operationName": { "value": "Microsoft.Network/networkSecurityGroups/securityRules/delete" } }, "groupNames": [ "CIS_Azure_2.0.0_5.1.2", "CIS_Azure_2.0.0_5.2.3", "CIS_Azure_2.0.0_5.2.4", "CIS_Azure_2.0.0_5.2.5", "CIS_Azure_2.0.0_5.2.6", "CIS_Azure_2.0.0_5.2.7", "CIS_Azure_2.0.0_5.2.8" ] }, { "policyDefinitionReferenceId": "b954148f-4c11-4c38-8221-be76711e194a-4", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b954148f-4c11-4c38-8221-be76711e194a", "definitionVersion": "1.*.*", "parameters": { "effect": { "value": "[parameters('effect-b954148f-4c11-4c38-8221-be76711e194a-MicrosoftSql-servers-firewallRules-write')]" }, "operationName": { "value": "Microsoft.Sql/servers/firewallRules/write" } }, "groupNames": [ "CIS_Azure_2.0.0_5.1.2", "CIS_Azure_2.0.0_5.2.3", "CIS_Azure_2.0.0_5.2.4", "CIS_Azure_2.0.0_5.2.5", "CIS_Azure_2.0.0_5.2.6", "CIS_Azure_2.0.0_5.2.7", "CIS_Azure_2.0.0_5.2.8" ] }, { "policyDefinitionReferenceId": "b954148f-4c11-4c38-8221-be76711e194a-5", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b954148f-4c11-4c38-8221-be76711e194a", "definitionVersion": "1.*.*", "parameters": { "effect": { "value": "[parameters('effect-b954148f-4c11-4c38-8221-be76711e194a-MicrosoftSql-servers-firewallRules-delete')]" }, "operationName": { "value": "Microsoft.Sql/servers/firewallRules/delete" } }, "groupNames": [ "CIS_Azure_2.0.0_5.1.2", "CIS_Azure_2.0.0_5.2.3", "CIS_Azure_2.0.0_5.2.4", "CIS_Azure_2.0.0_5.2.5", "CIS_Azure_2.0.0_5.2.6", "CIS_Azure_2.0.0_5.2.7", "CIS_Azure_2.0.0_5.2.8" ] }, { "policyDefinitionReferenceId": "b954148f-4c11-4c38-8221-be76711e194a-6", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b954148f-4c11-4c38-8221-be76711e194a", "definitionVersion": "1.*.*", "parameters": { "effect": { "value": "[parameters('effect-b954148f-4c11-4c38-8221-be76711e194a-MicrosoftClassicNetwork-networkSecurityGroups-write')]" }, "operationName": { "value": "Microsoft.ClassicNetwork/networkSecurityGroups/write" } }, "groupNames": [ "CIS_Azure_2.0.0_5.1.2", "CIS_Azure_2.0.0_5.2.3", "CIS_Azure_2.0.0_5.2.4", "CIS_Azure_2.0.0_5.2.5", "CIS_Azure_2.0.0_5.2.6", "CIS_Azure_2.0.0_5.2.7", "CIS_Azure_2.0.0_5.2.8" ] }, { "policyDefinitionReferenceId": "b954148f-4c11-4c38-8221-be76711e194a-7", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b954148f-4c11-4c38-8221-be76711e194a", "definitionVersion": "1.*.*", "parameters": { "effect": { "value": "[parameters('effect-b954148f-4c11-4c38-8221-be76711e194a-MicrosoftClassicNetwork-networkSecurityGroups-delete')]" }, "operationName": { "value": "Microsoft.ClassicNetwork/networkSecurityGroups/delete" } }, "groupNames": [ "CIS_Azure_2.0.0_5.1.2", "CIS_Azure_2.0.0_5.2.3", "CIS_Azure_2.0.0_5.2.4", "CIS_Azure_2.0.0_5.2.5", "CIS_Azure_2.0.0_5.2.6", "CIS_Azure_2.0.0_5.2.7", "CIS_Azure_2.0.0_5.2.8" ] }, { "policyDefinitionReferenceId": "b954148f-4c11-4c38-8221-be76711e194a-8", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b954148f-4c11-4c38-8221-be76711e194a", "definitionVersion": "1.*.*", "parameters": { "effect": { "value": "[parameters('effect-b954148f-4c11-4c38-8221-be76711e194a-MicrosoftClassicNetwork-networkSecurityGroups-securityRules-write')]" }, "operationName": { "value": "Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write" } }, "groupNames": [ "CIS_Azure_2.0.0_5.1.2", "CIS_Azure_2.0.0_5.2.3", "CIS_Azure_2.0.0_5.2.4", "CIS_Azure_2.0.0_5.2.5", "CIS_Azure_2.0.0_5.2.6", "CIS_Azure_2.0.0_5.2.7", "CIS_Azure_2.0.0_5.2.8" ] }, { "policyDefinitionReferenceId": "b954148f-4c11-4c38-8221-be76711e194a-9", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b954148f-4c11-4c38-8221-be76711e194a", "definitionVersion": "1.*.*", "parameters": { "effect": { "value": "[parameters('effect-b954148f-4c11-4c38-8221-be76711e194a-MicrosoftClassicNetwork-networkSecurityGroups-securityRules-delete')]" }, "operationName": { "value": "Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/delete" } }, "groupNames": [ "CIS_Azure_2.0.0_5.1.2", "CIS_Azure_2.0.0_5.2.3", "CIS_Azure_2.0.0_5.2.4", "CIS_Azure_2.0.0_5.2.5", "CIS_Azure_2.0.0_5.2.6", "CIS_Azure_2.0.0_5.2.7", "CIS_Azure_2.0.0_5.2.8" ] }, { "policyDefinitionReferenceId": "22730e10-96f6-4aac-ad84-9383d35b5917", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/22730e10-96f6-4aac-ad84-9383d35b5917", "definitionVersion": "3.*.*", "parameters": { "effect": { "value": "[parameters('effect-22730e10-96f6-4aac-ad84-9383d35b5917')]" } }, "groupNames": [ "CIS_Azure_2.0.0_6.1", "CIS_Azure_2.0.0_6.2" ] }, { "policyDefinitionReferenceId": "1ecb79d7-1a06-9a3b-3be8-f434d04d1ec1", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1ecb79d7-1a06-9a3b-3be8-f434d04d1ec1", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_4.1.6", "CIS_Azure_2.0.0_4.3.6", "CIS_Azure_2.0.0_5.4", "CIS_Azure_2.0.0_6.5" ] }, { "policyDefinitionReferenceId": "ece8bb17-4080-5127-915f-dc7267ee8549", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ece8bb17-4080-5127-915f-dc7267ee8549", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_6.6" ] }, { "policyDefinitionReferenceId": "b6e2945c-0b7b-40f5-9233-7a5323b5cdc6", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b6e2945c-0b7b-40f5-9233-7a5323b5cdc6", "definitionVersion": "3.*.*", "parameters": { "resourceGroupName": { "value": "[parameters('resourceGroupName-b6e2945c-0b7b-40f5-9233-7a5323b5cdc6')]" } }, "groupNames": [ "CIS_Azure_2.0.0_6.6" ] }, { "policyDefinitionReferenceId": "55a7f9a0-6397-7589-05ef-5ed59a8149e7", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/55a7f9a0-6397-7589-05ef-5ed59a8149e7", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_7.2" ] }, { "policyDefinitionReferenceId": "e603da3a-8af7-4f8a-94cb-1bcc0e0333d2", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e603da3a-8af7-4f8a-94cb-1bcc0e0333d2", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_7.2" ] }, { "policyDefinitionReferenceId": "e23444b9-9662-40f3-289e-6d25c02b48fa", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e23444b9-9662-40f3-289e-6d25c02b48fa", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_7.2" ] }, { "policyDefinitionReferenceId": "06a78e20-9358-41c9-923c-fb736d382a4d", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/06a78e20-9358-41c9-923c-fb736d382a4d", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_7.2" ] }, { "policyDefinitionReferenceId": "c0e996f8-39cf-4af9-9f45-83fbde810432", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c0e996f8-39cf-4af9-9f45-83fbde810432", "definitionVersion": "1.*.*", "parameters": { "effect": { "value": "[parameters('effect-c0e996f8-39cf-4af9-9f45-83fbde810432')]" }, "approvedExtensions": { "value": "[parameters('approvedExtensions-c0e996f8-39cf-4af9-9f45-83fbde810432')]" } }, "groupNames": [ "CIS_Azure_2.0.0_7.5" ] }, { "policyDefinitionReferenceId": "db28735f-518f-870e-15b4-49623cbe3aa0", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/db28735f-518f-870e-15b4-49623cbe3aa0", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_7.6" ] }, { "policyDefinitionReferenceId": "152b15f7-8e1f-4c1f-ab71-8c010ba5dbc0", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/152b15f7-8e1f-4c1f-ab71-8c010ba5dbc0", "definitionVersion": "1.*.*", "parameters": { "effect": { "value": "[parameters('effect-152b15f7-8e1f-4c1f-ab71-8c010ba5dbc0')]" } }, "groupNames": [ "CIS_Azure_2.0.0_8.1", "CIS_Azure_2.0.0_8.2" ] }, { "policyDefinitionReferenceId": "98728c90-32c7-4049-8429-847dc0f4fe37", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/98728c90-32c7-4049-8429-847dc0f4fe37", "definitionVersion": "1.*.*", "parameters": { "effect": { "value": "[parameters('effect-98728c90-32c7-4049-8429-847dc0f4fe37')]" } }, "groupNames": [ "CIS_Azure_2.0.0_8.3", "CIS_Azure_2.0.0_8.4" ] }, { "policyDefinitionReferenceId": "0b60c0b2-2dc2-4e1c-b5c9-abbed971de53", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0b60c0b2-2dc2-4e1c-b5c9-abbed971de53", "definitionVersion": "2.*.*", "parameters": { "effect": { "value": "[parameters('effect-0b60c0b2-2dc2-4e1c-b5c9-abbed971de53')]" } }, "groupNames": [ "CIS_Azure_2.0.0_8.5" ] }, { "policyDefinitionReferenceId": "1e66c121-a66a-4b1f-9b83-0fd99bf0fc2d", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1e66c121-a66a-4b1f-9b83-0fd99bf0fc2d", "definitionVersion": "3.*.*", "parameters": { "effect": { "value": "[parameters('effect-1e66c121-a66a-4b1f-9b83-0fd99bf0fc2d')]" } }, "groupNames": [ "CIS_Azure_2.0.0_8.5" ] }, { "policyDefinitionReferenceId": "12d4fa5e-1f9f-4c21-97a9-b99b3c6611b5", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/12d4fa5e-1f9f-4c21-97a9-b99b3c6611b5", "definitionVersion": "1.*.*-preview", "parameters": { "effect": { "value": "[parameters('effect-12d4fa5e-1f9f-4c21-97a9-b99b3c6611b5')]" } }, "groupNames": [ "CIS_Azure_2.0.0_8.6" ] }, { "policyDefinitionReferenceId": "a6abeaec-4d90-4a02-805f-6b26c4d3fbe9", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a6abeaec-4d90-4a02-805f-6b26c4d3fbe9", "definitionVersion": "1.*.*", "parameters": { "audit_effect": { "value": "[parameters('audit_effect-a6abeaec-4d90-4a02-805f-6b26c4d3fbe9')]" } }, "groupNames": [ "CIS_Azure_2.0.0_8.7" ] }, { "policyDefinitionReferenceId": "d8cf8476-a2ec-4916-896e-992351803c44", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/d8cf8476-a2ec-4916-896e-992351803c44", "definitionVersion": "1.*.*", "parameters": { "effect": { "value": "[parameters('effect-d8cf8476-a2ec-4916-896e-992351803c44')]" }, "maximumDaysToRotate": { "value": "[parameters('maximumDaysToRotate-d8cf8476-a2ec-4916-896e-992351803c44')]" } }, "groupNames": [ "CIS_Azure_2.0.0_8.8" ] }, { "policyDefinitionReferenceId": "6f1de470-79f3-1572-866e-db0771352fc8", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6f1de470-79f3-1572-866e-db0771352fc8", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_1.1.1", "CIS_Azure_2.0.0_9.1", "CIS_Azure_2.0.0_9.4" ] }, { "policyDefinitionReferenceId": "e336d5f4-4d8f-0059-759c-ae10f63d1747", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e336d5f4-4d8f-0059-759c-ae10f63d1747", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_9.1" ] }, { "policyDefinitionReferenceId": "1d39b5d9-0392-8954-8359-575ce1957d1a", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/1d39b5d9-0392-8954-8359-575ce1957d1a", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_9.1" ] }, { "policyDefinitionReferenceId": "c75248c1-ea1d-4a9c-8fc9-29a6aabd5da8", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/c75248c1-ea1d-4a9c-8fc9-29a6aabd5da8", "definitionVersion": "3.*.*", "parameters": { "effect": { "value": "[parameters('effect-c75248c1-ea1d-4a9c-8fc9-29a6aabd5da8')]" } }, "groupNames": [ "CIS_Azure_2.0.0_9.1" ] }, { "policyDefinitionReferenceId": "95bccee9-a7f8-4bec-9ee9-62c3473701fc", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/95bccee9-a7f8-4bec-9ee9-62c3473701fc", "definitionVersion": "2.*.*", "parameters": { "effect": { "value": "[parameters('effect-95bccee9-a7f8-4bec-9ee9-62c3473701fc')]" } }, "groupNames": [ "CIS_Azure_2.0.0_9.1" ] }, { "policyDefinitionReferenceId": "a4af4a39-4135-47fb-b175-47fbdf85311d", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a4af4a39-4135-47fb-b175-47fbdf85311d", "definitionVersion": "4.*.*", "parameters": { "effect": { "value": "[parameters('effect-a4af4a39-4135-47fb-b175-47fbdf85311d')]" } }, "groupNames": [ "CIS_Azure_2.0.0_9.2" ] }, { "policyDefinitionReferenceId": "f9d614c5-c173-4d56-95a7-b4437057d193", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f9d614c5-c173-4d56-95a7-b4437057d193", "definitionVersion": "2.*.*", "parameters": { "effect": { "value": "[parameters('effect-f9d614c5-c173-4d56-95a7-b4437057d193')]" } }, "groupNames": [ "CIS_Azure_2.0.0_9.3" ] }, { "policyDefinitionReferenceId": "f0e6e85b-9b9f-4a4b-b67b-f730d42f1b0b", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f0e6e85b-9b9f-4a4b-b67b-f730d42f1b0b", "definitionVersion": "2.*.*", "parameters": { "effect": { "value": "[parameters('effect-f0e6e85b-9b9f-4a4b-b67b-f730d42f1b0b')]" } }, "groupNames": [ "CIS_Azure_2.0.0_9.3" ] }, { "policyDefinitionReferenceId": "eaebaea7-8013-4ceb-9d14-7eb32271373c", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/eaebaea7-8013-4ceb-9d14-7eb32271373c", "definitionVersion": "3.*.*", "parameters": { "effect": { "value": "[parameters('effect-eaebaea7-8013-4ceb-9d14-7eb32271373c')]" } }, "groupNames": [ "CIS_Azure_2.0.0_9.4" ] }, { "policyDefinitionReferenceId": "5bb220d9-2698-4ee4-8404-b9c30c9df609", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5bb220d9-2698-4ee4-8404-b9c30c9df609", "definitionVersion": "3.*.*", "parameters": { "effect": { "value": "[parameters('effect-5bb220d9-2698-4ee4-8404-b9c30c9df609')]" } }, "groupNames": [ "CIS_Azure_2.0.0_9.4" ] }, { "policyDefinitionReferenceId": "0da106f2-4ca3-48e8-bc85-c638fe6aea8f", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0da106f2-4ca3-48e8-bc85-c638fe6aea8f", "definitionVersion": "3.*.*", "parameters": { "effect": { "value": "[parameters('effect-0da106f2-4ca3-48e8-bc85-c638fe6aea8f')]" } }, "groupNames": [ "CIS_Azure_2.0.0_9.5" ] }, { "policyDefinitionReferenceId": "2b9ad585-36bc-4615-b300-fd4435808332", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/2b9ad585-36bc-4615-b300-fd4435808332", "definitionVersion": "3.*.*", "parameters": { "effect": { "value": "[parameters('effect-2b9ad585-36bc-4615-b300-fd4435808332')]" } }, "groupNames": [ "CIS_Azure_2.0.0_9.5" ] }, { "policyDefinitionReferenceId": "be38a620-000b-21cf-3cb3-ea151b704c3b", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/be38a620-000b-21cf-3cb3-ea151b704c3b", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_4.2.2", "CIS_Azure_2.0.0_4.2.3", "CIS_Azure_2.0.0_4.2.4", "CIS_Azure_2.0.0_4.2.5", "CIS_Azure_2.0.0_9.6", "CIS_Azure_2.0.0_9.7", "CIS_Azure_2.0.0_9.8", "CIS_Azure_2.0.0_9.9" ] }, { "policyDefinitionReferenceId": "f466b2a6-823d-470d-8ea5-b031e72d79ae", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f466b2a6-823d-470d-8ea5-b031e72d79ae", "definitionVersion": "1.*.*", "parameters": { "effect": { "value": "[parameters('effect-f466b2a6-823d-470d-8ea5-b031e72d79ae')]" }, "LinuxPHPVersion": { "value": "[parameters('LinuxPHPVersion')]" } }, "groupNames": [ "CIS_Azure_2.0.0_9.6" ] }, { "policyDefinitionReferenceId": "7261b898-8a84-4db8-9e04-18527132abb3", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7261b898-8a84-4db8-9e04-18527132abb3", "definitionVersion": "3.*.*", "parameters": { "effect": { "value": "[parameters('effect-7261b898-8a84-4db8-9e04-18527132abb3')]" }, "LinuxPHPVersion": { "value": "[parameters('LinuxPHPVersion')]" } }, "groupNames": [ "CIS_Azure_2.0.0_9.6" ] }, { "policyDefinitionReferenceId": "9c014953-ef68-4a98-82af-fd0f6b2306c8", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9c014953-ef68-4a98-82af-fd0f6b2306c8", "definitionVersion": "1.*.*", "parameters": { "effect": { "value": "[parameters('effect-9c014953-ef68-4a98-82af-fd0f6b2306c8')]" }, "LinuxPythonVersion": { "value": "[parameters('LinuxPythonVersion')]" } }, "groupNames": [ "CIS_Azure_2.0.0_9.7" ] }, { "policyDefinitionReferenceId": "7008174a-fd10-4ef0-817e-fc820a951d73", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/7008174a-fd10-4ef0-817e-fc820a951d73", "definitionVersion": "4.*.*", "parameters": { "effect": { "value": "[parameters('effect-7008174a-fd10-4ef0-817e-fc820a951d73')]" }, "LinuxPythonVersion": { "value": "[parameters('LinuxPythonVersion')]" } }, "groupNames": [ "CIS_Azure_2.0.0_9.7" ] }, { "policyDefinitionReferenceId": "e1d1b522-02b0-4d18-a04f-5ab62d20445f", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e1d1b522-02b0-4d18-a04f-5ab62d20445f", "definitionVersion": "1.*.*", "parameters": { "effect": { "value": "[parameters('effect-e1d1b522-02b0-4d18-a04f-5ab62d20445f')]" }, "LinuxJavaVersion": { "value": "[parameters('LinuxJavaVersion')]" } }, "groupNames": [ "CIS_Azure_2.0.0_9.8" ] }, { "policyDefinitionReferenceId": "9d0b6ea4-93e2-4578-bf2f-6bb17d22b4bc", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/9d0b6ea4-93e2-4578-bf2f-6bb17d22b4bc", "definitionVersion": "3.*.*", "parameters": { "effect": { "value": "[parameters('effect-9d0b6ea4-93e2-4578-bf2f-6bb17d22b4bc')]" }, "LinuxJavaVersion": { "value": "[parameters('LinuxJavaVersion')]" } }, "groupNames": [ "CIS_Azure_2.0.0_9.8" ] }, { "policyDefinitionReferenceId": "e2c1c086-2d84-4019-bff3-c44ccd95113c", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e2c1c086-2d84-4019-bff3-c44ccd95113c", "definitionVersion": "4.*.*", "parameters": { "effect": { "value": "[parameters('effect-e2c1c086-2d84-4019-bff3-c44ccd95113c')]" } }, "groupNames": [ "CIS_Azure_2.0.0_9.9" ] }, { "policyDefinitionReferenceId": "8c122334-9d20-4eb8-89ea-ac9a705b74ae", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/8c122334-9d20-4eb8-89ea-ac9a705b74ae", "definitionVersion": "4.*.*", "parameters": { "effect": { "value": "[parameters('effect-8c122334-9d20-4eb8-89ea-ac9a705b74ae')]" } }, "groupNames": [ "CIS_Azure_2.0.0_9.9" ] }, { "policyDefinitionReferenceId": "399b2637-a50f-4f95-96f8-3a145476eb15", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/399b2637-a50f-4f95-96f8-3a145476eb15", "definitionVersion": "3.*.*", "parameters": { "effect": { "value": "[parameters('effect-399b2637-a50f-4f95-96f8-3a145476eb15')]" } }, "groupNames": [ "CIS_Azure_2.0.0_9.10" ] }, { "policyDefinitionReferenceId": "4d24b6d4-5e53-4a4f-a7f4-618fa573ee4b", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4d24b6d4-5e53-4a4f-a7f4-618fa573ee4b", "definitionVersion": "3.*.*", "parameters": { "effect": { "value": "[parameters('effect-4d24b6d4-5e53-4a4f-a7f4-618fa573ee4b')]" } }, "groupNames": [ "CIS_Azure_2.0.0_9.10" ] }, { "policyDefinitionReferenceId": "3ad7f0bc-3d03-0585-4d24-529779bb02c2", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/3ad7f0bc-3d03-0585-4d24-529779bb02c2", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_9.11" ] }, { "policyDefinitionReferenceId": "b8dad106-6444-5f55-307e-1e1cc9723e39", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b8dad106-6444-5f55-307e-1e1cc9723e39", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_9.11" ] }, { "policyDefinitionReferenceId": "bd4dc286-2f30-5b95-777c-681f3a7913d3", "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/bd4dc286-2f30-5b95-777c-681f3a7913d3", "definitionVersion": "1.*.*", "parameters": {}, "groupNames": [ "CIS_Azure_2.0.0_1.18", "CIS_Azure_2.0.0_1.19", "CIS_Azure_2.0.0_1.20", "CIS_Azure_2.0.0_1.21", "CIS_Azure_2.0.0_1.23", "CIS_Azure_2.0.0_1.24", "CIS_Azure_2.0.0_10.1" ] } ], "versions": [ "1.5.0", "1.4.0", "1.3.0", "1.2.0", "1.1.0", "1.0.0" ] }, "id": "/providers/Microsoft.Authorization/policySetDefinitions/06f19060-9e68-4070-92ca-f15cc126059e", "name": "06f19060-9e68-4070-92ca-f15cc126059e" }